Welcome to ISAserver.org

MIME Types for secure banking sites

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> MIME Types for secure banking sites

Page: [1]

Message

<< Older Topic Newer Topic >>

MIME Types for secure banking sites - 21.Mar.2007 10:08:01 AM

lobot

Posts: 42
Joined: 20.Apr.2005
Status: offline

Our company just recently decided to allow all of our users internet access over the company lunch hour. The catch is this.......we'll let the users visit any site they want to but we still want to block content. I've created a content type set for all the content that isn't allowed: (application, application/octet-stream, ms-download, g-tar, .zip, .exe -- AND some others).

The problem we have is that something is blocking access to one of our worker's online banking site. If I allow all content, there isn't any problem with access. Something in my blocked content list must be prohibiting access. Does anyone know what that MIME type might be?

I could take a trial and error approach but we're a small company with limited resources for testing.

Help me Obi-wan ANYBODY, your my only hope.....

Thx,
Lobot

Post #: 1

Featured Links*

RE: MIME Types for secure banking sites - 11.Apr.2007 4:26:26 PM

jwf1776

Posts: 7
Joined: 9.Feb.2004
Status: offline

froma comp that can access the site, you can use wireshark to sniff the traffic to the banking site to verify which mime types the site specifies

also, look in the ISA logging to see which rule is blocking the requests to the banking site

(in reply to lobot)

Post #: 2

RE: MIME Types for secure banking sites - 28.May2007 10:45:56 PM

xmachine

Posts: 1
Joined: 28.May2007
Status: offline

The reason is mostly because you've disabled the application / application data which includes *.crt / *.crt files which are required for exchanging SSL certificate with the bank web server ... so u need to exclude these files ...

to try it (allow all contents) ... check the ISA logging while some one is logging to his lovely online banking site .. and see the process

Good luck

(in reply to lobot)