This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filtering and HOSTS File

Hello

I have an SG210 running 9.501-5

We use Web Filtering in Standard Mode with AD SSO enabled. We have a client app that requires an entry in the HOSTS file of the client to function. It appears that Web Filtering ignores the HOSTS file entry. I have found a similar post that says this is correct and the answer is to add the destination IP in the Transparent Mode Destination Skip List, this does not fix the problem for us.

Looking at the Web Filtering Live Log I can see that the DNS (subdomain.domain.com) is being resolved to that domain's public IP rather than the IP in the HOSTS file.

How can I resolve this?

Many thanks

This thread was automatically locked due to age.

Parents

0 HuberChristian over 7 years ago

Does it maybe help, when you do a static DNS Entry on the UTM by going to Definition & Users > Network Definition > Add a new definition where you underlay the DNS Hostname to the Object?

Please send me Spam gueselkuebel@sg-utm.also-solutions.ch
Cancel
Vote Up 0 Vote Down

Cancel
0 gr33ny over 7 years ago in reply to HuberChristian

Thanks for your reply

This has helped a bit - I did have "https://subdomain.domain.com" in the network object but when I removed the "https" the web filter now resolves the IP address as a local address but I cannot access the page. In the web filtering log it says "no route to host".

If I try as a user account that is not subject to web filtering this works OK.

Any further suggestions?

Thanks again
Cancel
Vote Up 0 Vote Down

Cancel
+1 gr33ny over 7 years ago in reply to gr33ny

Hello

I opened a case with Sophos and it was resolved by adding the DNS address and IP address to the "bypass proxy for local address" list.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 7 years ago in reply to gr33ny

If using standard mode - The UTM will resolve the IP based on the objects defined.

If using transparent mode and pharming protection on - The UTM will resolve hostname to IP based on the objects defined.

If using transparent mode and pharming protection off- The UTM will use whatever IP the client tried to connect to.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Michael Dunn over 7 years ago in reply to gr33ny

If using standard mode - The UTM will resolve the IP based on the objects defined.

If using transparent mode and pharming protection on - The UTM will resolve hostname to IP based on the objects defined.

If using transparent mode and pharming protection off- The UTM will use whatever IP the client tried to connect to.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data