topic Re: URL Filtering https disabled in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223041#M42765 <P>Thanks Gojira, I do have these settings enabled.</P><P>It's worth mentioning that the deployment is in a bridged mode. I have 2 interfaces, one in and one for outgoing.</P> Thu, 08 Aug 2024 10:35:03 GMT boom247 2024-08-08T10:35:03Z URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223037#M42763 <P>Hi CheckMates</P><P>&nbsp;</P><P>I have a gateway running R81.20 and trying to do url filtering but it's not working as expected. Not blocking the categories.</P><P>Is https inspection a pre-requisite for url filtering?</P><P>&nbsp;</P> Thu, 08 Aug 2024 09:39:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223037#M42763 boom247 2024-08-08T09:39:09Z Re: URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223040#M42764 <P>No its not.<BR /><BR />Make sure you have categorize https sites enabled under management &amp; settigns &gt; blades &gt; app control url filtering</P><P>&nbsp;</P><DIV class="">&nbsp;</DIV><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 770px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27162iF4FE712A80A8A7E6/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> Thu, 08 Aug 2024 10:27:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223040#M42764 Machine_Head 2024-08-08T10:27:39Z Re: URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223041#M42765 <P>Thanks Gojira, I do have these settings enabled.</P><P>It's worth mentioning that the deployment is in a bridged mode. I have 2 interfaces, one in and one for outgoing.</P> Thu, 08 Aug 2024 10:35:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223041#M42765 boom247 2024-08-08T10:35:03Z Re: URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223044#M42767 <P>What do you have configured in the destination field of the policy (Any), does the logs see the traffic as HTTPS or QUIC (you may have to block the latter)?</P> Thu, 08 Aug 2024 12:46:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223044#M42767 Chris_Atkinson 2024-08-08T12:46:30Z Re: URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223047#M42769 <P>Well, put it this way. You can have pages blocked, BUT, it will look goofy, for the lack of the better term, as block page will never show up. If you need help, I have perfectly working lab, so can show you.</P> <P>Best,</P> <P>Andy</P> Thu, 08 Aug 2024 12:05:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223047#M42769 the_rock 2024-08-08T12:05:28Z Re: URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223048#M42770 <P>Also, to add to my last comment, FWIW...without ssl inspection, firewall cant be "man in the middle (MITM)", so nothing to inspect to begin with, tus you would never see the block page. Also, considering that literally 99.99% of the sites nowdays are https, it only makes sense to have that enabled. You wont see much difference in cpu/memory if you are running powerful hardware.</P> <P>Andy</P> Thu, 08 Aug 2024 12:24:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223048#M42770 the_rock 2024-08-08T12:24:27Z Re: URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223079#M42775 <P>Thanks all, eventually got it working. I enabled the blade under the standard policy. As Lend mentioned, it's not showing any block pages, guess will have to enable https for that.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2024-08-08 154937.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27169iA2305D43BF188E07/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2024-08-08 154937.png" alt="Screenshot 2024-08-08 154937.png" /></span></P><P> </P><DIV class="">&nbsp;</DIV><P>&nbsp;</P><P>&nbsp;</P> Thu, 08 Aug 2024 13:53:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223079#M42775 boom247 2024-08-08T13:53:09Z Re: URL Filtering https disabled https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223080#M42776 <P>That looks right. I sent the link I made about this on community while ago, so you can also refere to it.</P> <P>Andy</P> <P><A href="https://community.checkpoint.com/t5/Security-Gateways/Https-inspection-lab-guide/m-p/214429#M40929" target="_blank">https://community.checkpoint.com/t5/Security-Gateways/Https-inspection-lab-guide/m-p/214429#M40929</A></P> Thu, 08 Aug 2024 13:56:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-https-disabled/m-p/223080#M42776 the_rock 2024-08-08T13:56:12Z