Hot!Webfilter doesn't work if access goes through google search with internet explorer.

Author
rezendecs
Bronze Member
  • Total Posts : 24
  • Scores: -2
  • Reward points: 0
  • Joined: 2013/10/23 04:31:39
  • Status: offline
2015/02/10 10:46:23 (permalink)
0

Webfilter doesn't work if access goes through google search with internet explorer.

Webfilter doesn't work if access goes through google search with internet explorer. 
 
If the user try access youtube.com using google search with chrome, the webfilter work and the access is denied, but if the same access is with internet explorer the access is allowed.
 
Look the log file attached...
 
Fortigate 100D
5.0.9
 
 
Regards,
Claudio

Attached Image(s)

#1

10 Replies Related Threads

    jb.kalm
    Bronze Member
    • Total Posts : 42
    • Scores: 2
    • Reward points: 0
    • Joined: 2015/02/03 06:55:22
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/10 12:28:01 (permalink)
    0
    Hi, can you send a screenshot of the log when the traffic is blocked as well?
     
    Thanks,
     
    jb
    #2
    rezendecs
    Bronze Member
    • Total Posts : 24
    • Scores: -2
    • Reward points: 0
    • Joined: 2013/10/23 04:31:39
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/11 04:14:20 (permalink)
    0
    Yes,
     
       Look the file attached.
     
     
    Regards,
    Claudio

    Attached Image(s)

    #3
    ashukla_FTNT
    Silver Member
    • Total Posts : 87
    • Scores: 7
    • Reward points: 0
    • Joined: 2015/02/02 04:25:16
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/11 05:16:44 (permalink)
    0
    Run wireshark on pc from where you are doing the test.
    Look at http get to the google server and check if it is different from the blocked one using chrome.
    You can also post the http get here.
    #4
    jb.kalm
    Bronze Member
    • Total Posts : 42
    • Scores: 2
    • Reward points: 0
    • Joined: 2015/02/03 06:55:22
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/11 06:13:20 (permalink)
    0
    Hi, thanks for the screenshot. These are my thoughts. If you look at the URL on the blocked log message it is going to gdata.youtube.com which is blocked on your webfilter config. However when a user searches through Google and they click on a link for youtube it most likely takes them to https://www.youtube.com. If you don't have SSL inspection turned on and configured your webfilter will not be able to block it. Do you have SSL Inspection turned on and configured?
     
    Thanks,
     
    jb
    #5
    jb.kalm
    Bronze Member
    • Total Posts : 42
    • Scores: 2
    • Reward points: 0
    • Joined: 2015/02/03 06:55:22
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/11 06:13:20 (permalink)
    0
    Sorry for duplicate post.
     
    Thanks,
     
    jb
    post edited by jb - 2015/02/11 06:20:38
    #6
    rezendecs
    Bronze Member
    • Total Posts : 24
    • Scores: -2
    • Reward points: 0
    • Joined: 2013/10/23 04:31:39
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/11 09:55:55 (permalink)
    0
    Hi JB,
     
      Yes, I have ssl inspection enabled.
      Curious is that in chrome the webfilter work fine, just with IE the problem happen.
     
     
    Regards,
    Claudio
    #7
    jb.kalm
    Bronze Member
    • Total Posts : 42
    • Scores: 2
    • Reward points: 0
    • Joined: 2015/02/03 06:55:22
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/11 11:06:14 (permalink)
    0
    Hi Claudio,
     
    I'm wondering if it could be a caching issue. Can you clear the cache on the web browser having the issue and try again? Is it just one computer or all computers?
     
    Thanks,
     
    jb
    #8
    jb.kalm
    Bronze Member
    • Total Posts : 42
    • Scores: 2
    • Reward points: 0
    • Joined: 2015/02/03 06:55:22
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/02/11 12:14:49 (permalink)
    0
    Also how do you have this configured at the moment?
     
    Rate URLs by Domain and IP Address:
    http://docs-legacy.fortin...er_chapter.154.55.html
    #9
    thierry2208
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2015/03/11 08:44:39
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2015/03/16 09:04:02 (permalink)
    0
    Hi,
    I have the same issue on my Fortigate110C ver 5.2.2
    The problem appears with google searches through IE and Mozilla. It's working fine with Chrome
    The returned URL (for example search on site voiceprep.nl) give the following as %%URL%% variable for system message replacements:
    IE: http://www.google.lu/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&sqi=2&ved=0CB8QFjAA&url=http%3A%2F%2Fvoiceprep.nl%2F&ei=V_0GVYynHovwUq29hOAP&usg=AFQjCNH2G1AZKl1m2a-FQyx9KoJRdaVqqg&sig2=KChueIaBfWcDzVPtW4Afiw
     
    Mozilla: http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CCUQFjAA&url=http%3A%2F%2Fvoiceprep.nl%2F&ei=XPwGVYC-KsTeU9z7gYgK&usg=AFQjCNH2G1AZKl1m2a-FQyx9KoJRdaVqqg&bvm=bv.88198703,d.d24
     
    but Chrome returns: voiceprep.nl/ 
     
    If you change the searched URL in IE and Mozilla from HTTP to HTTPS then the filtered message return the corret URl value = voiceprep.nl/
     
    Did anybody find out how to fix or bypass this problem?
    Cheers
    Thierry2208
     
    #10
    nano78
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/07/14 06:48:35
    • Status: offline
    Re: Webfilter doesn't work if access goes through google search with internet explorer. 2018/07/25 01:07:09 (permalink)
    0
    Hi, 
    I have exactly the same issue described by "thierry2208" on the last post.
    This behavior is observed on :
       - 5.4.9 version (VM, 51E, 1000D)
       - 5.6.2 version (VM)  
    Have you a solution or a workaround for this issue ? 
     
    Thank you.
     
    Best regards
     
    #11
    Jump to:
    © 2018 APG vNext Commercial Version 5.5