Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 3 subscribers
  • Views 8886 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Broken Websites with 9.4 and IE11

JayMan

We have 4  9.4 UTM's running inline in transparent mode with our network before this we had them setup with proxy.pac files telling IE to go out via the UTM. Since changing to inline we have an issue with some websites   spotify.com for example loading up  broken and missing pieces in IE11 but if you load the same website in Chrome it works fine. This only started after changing to inline transparent mode.

Are there settings in IE 11 I need to change to fix the websites.  I suspect it is a User GPO issue along with the UTM because as an admin I login and get no GPO's applied to me and these websites work for me without issues in IE11 but an end user who is locked down logs in and they can't load the website properly.

Tests i've done.

Computer as me and UTM as me = website loads fine

Computer as end user and UTM as me = broken website

Computer as end user and UTM as end user = broken website

Computer as end user and UTM as me = broken website.



This thread was automatically locked due to age.
Parents
  • 0

    Sorry.   I don't understand why one would ever want to migrate to Transparent from Standard.  You might want to ask for the document I maintain, "Configure HTTP Proxy for a Network of Guests - V9.3," available in English und auch auf Deutsch.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Sorry.   I don't understand why one would ever want to migrate to Transparent from Standard.  You might want to ask for the document I maintain, "Configure HTTP Proxy for a Network of Guests - V9.3," available in English und auch auf Deutsch.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    Check again Bob, he is going from standard (using proxy.pac) to inline transparent.

  • 0 in reply to Michael Dunn

    I see that, Michael.  It's just that control with the main body of the employees in Standard is more granular.

    EDIT 2012-06-17: It's also more secure as one can control traffic using non-standard ports, and that can't be done with Transparent mode.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    With Active Directory Inline works really well. Each group of employees has there own profile for allows/blocks etc..

    But i also discovered my broken website issue.  Group Policy had an option to treat all Intranet sites as compatibility mode which sends IE7 as the Agent for webpages.  For some reason going to Inline has some sites being detected wrong by IE as needing compatibility mode  but we have fixed it now so the errors are gone.

    BTW whoever can do suggestions.  NOT being able to make up exceptions in SUM that include AD groups/users really doesn't make sense. We can do global exceptions for the company across all our UTM's say by URL but to include a group of AD users we have to make them on the UTM itself which is very time consuming when you need to do it across multiple ones.

Unfiltered HTML