URL Filtering https disabled

[boom247]

Hi CheckMates

I have a gateway running R81.20 and trying to do url filtering but it's not working as expected. Not blocking the categories.

Is https inspection a pre-requisite for url filtering?

[Gojira]

No its not.

Make sure you have categorize https sites enabled under management & settigns > blades > app control url filtering

[boom247]

Thanks Gojira, I do have these settings enabled.

It's worth mentioning that the deployment is in a bridged mode. I have 2 interfaces, one in and one for outgoing.

[Chris_Atkinson]

What do you have configured in the destination field of the policy (Any), does the logs see the traffic as HTTPS or QUIC (you may have to block the latter)?

[the_rock]

Well, put it this way. You can have pages blocked, BUT, it will look goofy, for the lack of the better term, as block page will never show up. If you need help, I have perfectly working lab, so can show you.

Best,

Andy

[the_rock]

Also, to add to my last comment, FWIW...without ssl inspection, firewall cant be "man in the middle (MITM)", so nothing to inspect to begin with, tus you would never see the block page. Also, considering that literally 99.99% of the sites nowdays are https, it only makes sense to have that enabled. You wont see much difference in cpu/memory if you are running powerful hardware.

Andy

[boom247 · Accepted solution]

Thanks all, eventually got it working. I enabled the blade under the standard policy. As Lend mentioned, it's not showing any block pages, guess will have to enable https for that.

 

[the_rock]

That looks right. I sent the link I made about this on community while ago, so you can also refere to it.

Andy

https://community.checkpoint.com/t5/Security-Gateways/Https-inspection-lab-guide/m-p/214429#M40929