• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

https filtering add in?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> HTTP Filtering >> https filtering add in? Page: [1]
Login
Message << Older Topic   Newer Topic >>
https filtering add in? - 11.Sep.2008 12:40:51 PM   
brianmay27

 

Posts: 14
Joined: 26.Aug.2008
Status: offline
Is there some add on that will allow me to block https from a list of sites?

I would just block https because we are a school and kids these days know how to use https, however our e-mail uses https and we need to leave it open. I know it is possable because our sonicall can but i think it has to get do a dns lookup on the url and get a ip...

Thanks
Post #: 1
RE: https filtering add in? - 11.Sep.2008 4:22:55 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

read this: Using ISA 2004 Firewall Domain Name Sets to Control Internet Access

Regards,
Paulo Oliveira.

(in reply to brianmay27)
Post #: 2
RE: https filtering add in? - 11.Sep.2008 6:21:41 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Or look at something like Collective Software's ClearTunnel or Red Line Software's  SSL Decoder as these will allow you to actually inspect HTTPS (and block if using HTTP filters or Web Filtering software) to determine if the protocol is being abused.

This is a more elegant approach than just blocking based upon domain name...

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to paulo.oliveira)
Post #: 3
RE: https filtering add in? - 12.Sep.2008 12:33:18 AM   
brianmay27

 

Posts: 14
Joined: 26.Aug.2008
Status: offline
Thanks both for the quick replies, i will look at both to see which suits our needs.

thanks again

(in reply to Jason Jones)
Post #: 4
RE: https filtering add in? - 17.Sep.2008 10:33:26 AM   
brianmay27

 

Posts: 14
Joined: 26.Aug.2008
Status: offline
hello again,

So just a quick question i cant seem to find.

Son the tutorial they use *.sonicwall.com for instance, however i have found i could just get by the firewall if i do sonicwall.com. If i want to block
http://www.
https://www.
http://
https://
do i have to do both *.sonicwall.com and sonicwall.com in the domin list? or can i just do sonicwall.com and that will cover www.?

(in reply to brianmay27)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> HTTP Filtering >> https filtering add in? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts