This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filtering in Bridge mode with authentication

Hi All.

I stuck setting up my UTM. The goal is to have in-line Web Filtering with authentication. Similar to what Barracuda Web Filter has.

My network is:
-- --
On the Bridge Interface Default GW is set to router IP (10.0.0.1)

Web Filter is in Full Transparent mode. Default Authentication: Browser.
Allowed Networks: Any
Firewall Rule Any-Any-Allow active

IE or Firefox getting connection timeout. Without asking my Username/Password

Any help appreciated.

This thread was automatically locked due to age.

Parents

0 BAlfson over 9 years ago

Hi, and a belated welcome to the User BB!

Show us a representative "blocked" line from the Web Filtering log file.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 9 years ago

Hi, and a belated welcome to the User BB!

Show us a representative "blocked" line from the Web Filtering log file.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 adiomin over 9 years ago in reply to BAlfson

That's the thing. There are no block messages.
For the full picture, my setup is the following:

Management Interface eth0: 10.0.0.52/24

Bridge br0: 10.0.0.53/24, Default GW:10.0.0.1

Client IP: 10.0.0.133/24, Def GW: 10.0.0.1

Web Filtering: ON, Allowed Networks - Any, Operation Mode - Full Transparent, Def Authentication - "None"
Live Log:
2015:10:26-10:03:03 glgorewayutm httpproxy[3074]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.0.0.133" dstip="173.194.43.119" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="4123" request="0xe4140000" url="www.google.ca/" referer="" error="" authtime="0" dnstime="4140" cattime="761" avscantime="0" fullreqtime="10046176" device="0" auth="0" ua="" exceptions="" category="145" reputation="trusted" categoryname="Search Engines"

It shows "pass" but Client's Browser times out

If I change Authentication to "Browser" there are no even Live Log entries. Looks like Client not requesting anything. But it does.
Cancel
Vote Up 0 Vote Down

Cancel