topic Re: HTTPS Inspection Problem in Firewall and Security Management

HTTPS Inspection Problem

ahmeterkol — Wed, 25 Aug 2021 12:29:06 GMT

I want to inspect and drop only a specific URL but when I create a costom application with full URL (eg. www.example.com/test) it doesn't inspect packet. If I write down only domain it works (e.g. www.example.com ). In URL filtering it works with specific url in list no problem. For business purposes I have to inspect traffic only with specific url and bypass all URLs under same domain. What should I do for it?

Re: HTTPS Inspection Problem

_Val_ — Wed, 25 Aug 2021 14:15:16 GMT

Is it HTTPSi or URF filtering question, or both? 🙂

Re: HTTPS Inspection Problem

ahmeterkol — Wed, 25 Aug 2021 14:23:30 GMT

There is no problem in URL filtering with specific URL but in HTTPSi if I write full URL it doesn't match. I have to write main domain URL to match the inspection rule.

Re: HTTPS Inspection Problem

_Val_ — Wed, 25 Aug 2021 14:32:25 GMT

Please show your HTTPS inspection rule you are applying to that application

Re: HTTPS Inspection Problem

PhoneBoy — Wed, 25 Aug 2021 18:17:51 GMT

In order to see the the full URL, HTTPS Inspection needs to be performed.
We can see the site being accessed without it (at least up to TLS 1.2).
So it’s not possible to inspect only www.example.com/url without inspecting everything else at www.example.com.

Re: HTTPS Inspection Problem

ahmeterkol — Thu, 26 Aug 2021 05:46:38 GMT

Thanks

Re: HTTPS Inspection Problem

_Val_ — Thu, 26 Aug 2021 08:41:13 GMT

Hmmm, I assumed HTTPSi is enabled. Wrong assumption 🙂