topic Re: Blocked HTTPS requests are not getting a UserCheck message in General Topics

Blocked HTTPS requests are not getting a UserCheck message

Jason_Nickel1 — Fri, 11 May 2018 16:23:59 GMT

We are running the Application and URL Filtering blades but do not have HTTPS Inspection enabled.

When users attempt to access blocked HTTPS categories or domains they are not getting the UserCheck block message we have configured but rather the generic "Page Cannot Be Displayed" error from the browser.

We are categorizing HTTPS requests, just not inspecting the content.

Logs are showing that the HTTPS content is being blocked as configured.

Re: Blocked HTTPS requests are not getting a UserCheck message

Vladimir — Fri, 11 May 2018 17:03:29 GMT

If you do not have HTTPS inspection enabled, this is an expected behavior. THere are a lot of posts in this forum addressing this. If you want user check on blocked HTTPS sites, enable HTTPS inspection.

Re: Blocked HTTPS requests are not getting a UserCheck message

Nicolas_Bernier — Fri, 11 May 2018 18:50:46 GMT

Hi,

As Vladimir said, without SSL inspection, it is an expected behavior in certain case.

Other than that, I did has a similar situation on my side and I ended up getting a custom fix from TAC becore the apache services responsible for showing the block message was basically "out of port" of overloaded.

It could be a similar situation on your side depending of the number of user you have. In my case, we had about 2K user total.

I suggest to you to open a case at TAC about this issue. Other than that, if you want, I may be able to find more information regarding the custom patch I was running in R80.10 regarding this issue.

Thanks

Re: Blocked HTTPS requests are not getting a UserCheck message

Matt_Ricketts — Fri, 11 May 2018 19:52:03 GMT

I would love to see more information about this custom fix you received. Even just your SR number if you don't want to go into details. I have a customer that is looking for something similar. A custom message or some other error other than Page cannot be displayed.

Re: Blocked HTTPS requests are not getting a UserCheck message

Dmitriy_Chazov — Sat, 12 May 2018 12:53:53 GMT

Hey.

And how does the gateway work in proxy mode? If it is transparent, then the message will not be displayed.

At me for example in not transparent mode and the message UserCheck is not display

Re: Blocked HTTPS requests are not getting a UserCheck message

Nicolas_Bernier — Mon, 14 May 2018 12:54:37 GMT

Hi Matt,

Please look at SK85040. You have couple of values to change on each member.

Let me know of it does the tricks for you !

Thanks

Re: Blocked HTTPS requests are not getting a UserCheck message

PhoneBoy — Sat, 19 May 2018 21:22:08 GMT

You have the same basic issue in proxy mode, even where the firewall is the explicit proxy.

In explicit proxy mode, you can work around this with a proxy.pac file that tells the browser not to use a proxy for anything going to the firewall (which will allow the UserCheck page to display).