topic Re: usercheck page doesn't display in Firewall and Security Management

usercheck page doesn't display

fabiofabio — Tue, 23 Aug 2022 10:24:22 GMT

good morning,
I have created a rule specifically to block internet pages that a group of users cannot access and it works, they are blocked, the problem is that I have set up a usercheck page to make it clear to users that they cannot open it due to permissions, but this does not open. I put some screenshots to make you understand. suggestions on what the problem might be? thank you in advance, any suggestion is welcome 🙂

gaia 80.40 jumbo HF 158

Re: usercheck page doesn't display

_Val_ — Tue, 23 Aug 2022 10:32:55 GMT

As I can see in the logs, the traffic is HTTPS. Redirect on HTTPS only works if you enable HTTPS Inspection. HTTP clear text sites will be redirected to the UserCheck.

Re: usercheck page doesn't display

fabiofabio — Thu, 25 Aug 2022 06:58:22 GMT

I have activated HTTPS inspection but it does not block the page, below I show the logs and the rule created to block that specific page. The rule is ignored and the web page is allowed to pass by a subsequent rule ... What am I doing wrong?

thanks!

Re: usercheck page doesn't display

_Val_ — Thu, 25 Aug 2022 11:05:11 GMT

I assume, in rule 51 the source is an internal host, correct?

However, the destination is unclear. What do you use there, exactly? IP ranges? And why is service any? It should be web services only. There will be no blocking page for anything but HTTP/HTTPS

Re: usercheck page doesn't display

Chris_Atkinson — Thu, 25 Aug 2022 11:52:48 GMT

Agree with Val, rule 51 needs changes at a minimum to the services column.

Re: usercheck page doesn't display

fabiofabio — Mon, 29 Aug 2022 08:23:16 GMT

yes, as a source was my ip address, i'v tried to change it with my domain user, i'v tried to specify https service too:

but it doesnt work, there is the logs:

what am i doing wrong? it should work, right?

Re: usercheck page doesn't display

_Val_ — Mon, 29 Aug 2022 08:35:48 GMT

As already mentioned, please add a user role to the source, and limit services to http/https. Once done, push the policy and check again. Also, the logs about the CLR issue need to be investigated

Re: usercheck page doesn't display

fabiofabio — Tue, 30 Aug 2022 06:15:12 GMT

thank you for the support, at the end i have figured it out. was my mistake on the rule in the application layer... i was using in source ad user access role that can't be retrieved from my DC, so, the rule was skipped bue this problem and iw as using in the destination, the site i wanted to block. instead of putting it in the destination, it goes in the services / applications column. Now it's working but, like you sayd... the usercheck page display only with https inspection enabled. I hope this can help someone struggling like me with simple mistakes.

Re: usercheck page doesn't display

_Val_ — Tue, 30 Aug 2022 07:09:02 GMT

I am glad you figured this out. Simple mistakes are the hardest to spot 🙂