• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Content Type blocks certain HTTPS

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> Content Type blocks certain HTTPS Page: [1]
Login
Message << Older Topic   Newer Topic >>
Content Type blocks certain HTTPS - 29.Oct.2007 11:10:07 AM   
paleogryph

 

Posts: 9
Joined: 6.Feb.2006
Status: offline
ISA 2006.

I'm not sure what I'm doing wrong.  I have a basic "Web Access" Firewall Policy that allows HTTP and HTTPS from Internal to Internal/External for All Users, all the time.  That allowed web browsing, obviously. 

Then I wanted to fine tune things.  I set Content Type to Selected content types, checking all except Video.  Seemed to work great, blocked news videos on MSNBC, blocked videos from YouTube, etc;.  Then users started complaining that they couldn't access basic things like Gmail, and other HTTPS sites.  As soon as I enabled All content types, they could log in.

What am I missing?

thanks in advance!
Post #: 1
RE: Content Type blocks certain HTTPS - 15.Nov.2007 4:37:34 PM   
jmarch

 

Posts: 1
Joined: 26.Oct.2006
Status: offline
Hey there,

I have had the same problem when I did the exact same thing but was trying to stop Streaming Audio.

In the end I removed HTTPS from the existing Web Access rule and I had to create a seperate rule for HTTPS and not do any Content Filtering.

I think this is because the HTTPS protocol is encrypted and since ISA would not be able to look at the encrypted traffic, ISA just blocks all HTTPS traffic.  Don't know if there is another way and maybe someone else will suggest it.

(in reply to paleogryph)
Post #: 2
RE: Content Type blocks certain HTTPS - 16.Nov.2007 1:11:05 AM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
If you want ISA to treat HTTPS like HTTP you can take a look at ClearTunnel. Tutorial here:
http://isaserver.org/tutorials/Product-Review-Collective-Software-ClearTunnel.html

(in reply to jmarch)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> Content Type blocks certain HTTPS Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts