HTTPS Inspection Problem

[ahmeterkol]

Hi

I want to inspect and drop only a specific URL but when I create a costom application with full URL (eg. www.example.com/test) it doesn't inspect packet. If I write down only domain it works (e.g. www.example.com ). In URL filtering it works with specific url in list no problem. For business purposes I have to inspect traffic only with specific url and bypass all URLs under same domain. What should I do for it?

[_Val_]

Is it HTTPSi or URF filtering question, or both? 🙂 

[ahmeterkol]

There is no problem in URL filtering with specific URL but in HTTPSi if I write full URL it doesn't match. I have to write main domain URL to match the inspection rule.

[_Val_]

Please show your HTTPS inspection rule you are applying to that application

[PhoneBoy · Accepted solution]

In order to see the the full URL, HTTPS Inspection needs to be performed.
We can see the site being accessed without it (at least up to TLS 1.2).
So it’s not possible to inspect only www.example.com/url without inspecting everything else at www.example.com.

[ahmeterkol]

Thanks

[_Val_]

Hmmm, I assumed HTTPSi is enabled. Wrong assumption 🙂