Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » [v8.4.0] Content-Filter doesn't applies on HTTPs Sites (youtube, facebook etc.) (HTTPS Filtering -> Decrypt and filter HTTPS traffic is NOT WORKING)
  •  
AMET4

Messages: 16
Karma: 2
Send a private message to this user
Dear Kerio Team,

we updated the Kerio Control from v8.2.2 to v8.3.4 recently. Since the Update is done, HTTPS Sites are not filtered (blocked) anymore. This was working before.

Our configuration:


#URL Group:
Name: Blacklist
URL: youtube.(.*) [Use regular expression enabled]
URL: (.*).youtube.(.*) [Use regular expression enabled]
URL: facebook.(.*) [Use regular expression enabled]
URL: (.*).facebook.(.*) [Use regular expression enabled]


#Content-Rules:
Name: Site Blacklist
Detect content: Blacklist
Source: Any
Action: Deny, Log traffic


#HTTPS Filtering
*Decrypt and filter HTTPS traffic enabled
*Exclude specific traffic from decryption enabled
Traffic to/from IP addresses which belong to: None
Traffic from the following users: None


RESULT/ISSUE:
http://www.youtube.com/ -> Access denied

https://www.youtube.com/ -> Page is loading Normal, instead beeing blocked.



Is this a Bug or do we have adapt our Kerio configuration?

Regards,
AMET4

  •  
AMET4

Messages: 16
Karma: 2
Send a private message to this user
Hi Kerio-Team,

fyi - I am also referring to this Kerio-KB, which doesn't solve this Problem.

http://kb.kerio.com/product/kerio-control/content-filtering/ filtering-https-connections-1651.html

Regards,
AMET4
  •  
awpross

Messages: 2
Karma: 0
Send a private message to this user
We are just evaluating Kerio Control and found the same behaviour. Also the Content filter for words and the Option "Show Legal Notice to users" does not work.

After some Research, I noticed, that this only happens when using the non-transparent Proxy.

[Updated on: Tue, 21 October 2014 00:14]

  •  
AMET4

Messages: 16
Karma: 2
Send a private message to this user
@awpross: Thanks for your comment. We are using "NON-Transparent" Proxy with NTLM Auth. against a Active-Directory.

@Kerio: Is this a Bug in Version 8.4.0
  •  
AMET4

Messages: 16
Karma: 2
Send a private message to this user
Hi @all,

seems we could fix the Problem. It was caused that in the Browser (Firefox) the checkbox "Apply proxy to all Protocols" wasn't check, so SSL was skipped for using the Proxy. After checking this checkbox and applying it to all Protocols, HTTPS sites are filtered successful.

Regards,
AMET4
Previous Topic: Download the manual
Next Topic: Kerio Control to control Internet usage in network
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Jun 29 02:25:35 CEST 2017

Total time taken to generate the page: 0.00415 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.