topic Re: Ask User Verification access rule in Firewall and Security Management

Ask User Verification access rule

Mark_Edwards — Fri, 21 Feb 2025 12:19:29 GMT

A customer has a firewall rule where the action is "Ask UserCheck/User Verification" (see screenshot1).

This is for a HTTPS Web Site (A) which they are getting rid off and would like the users to verify their connection and then redirect their connection to an external portal as set in "User Verification" (Web Site B) - (see screenshot2).

Not sure why they want the user to verify the connection and if this is the correct way to do it.

From what I have read to redirect HTTPS traffic you need to have HTTPS Inspection enabled.

The logs show all connections to Web Site A being rejected with no reason.

How can we accomplish what they want, hopefully my explanation is good enough?

Re: Ask User Verification access rule

the_rock — Fri, 21 Feb 2025 13:06:23 GMT

100% you need ssl inspection for this. I actually have it running in the lab and can test specific site if you want me to.

Andy

Re: Ask User Verification access rule

the_rock — Fri, 21 Feb 2025 14:10:55 GMT

I also attached some screenshots from my lab.

Andy

Re: Ask User Verification access rule

PhoneBoy — Fri, 21 Feb 2025 21:58:13 GMT

HTTPS Inspection is absolutely required for this functionality since it is impossible to inject a redirect to the UserCheck portal without it.

Re: Ask User Verification access rule

Mark_Edwards — Thu, 13 Mar 2025 10:44:56 GMT

Hi, thanks. Implemented HTTPS Inspection and is working.