CWS AV and File Type blocking with TLS/SSL decryption

[Paul Masterton]

Hi All,

Probably a simple question but... I've got CWS set up with SSL/TLS decryption and working beautifully.

I decrypt all categories and let the existing HTTP rules dictate blocks and that works fine, for categories and blocked user agents.

However, none of my other HTTP rules apply:

1. File filters - users can download blocked file extensions over HTTPS (but not HTTP)
2. AV - there seems to be no AV on HTTPS transfers. EICARS downloads fine over HTTPS but is blocked over HTTP

Am I missing something blindingly obvious?

Any thoughts very welcome!

[Edan Mudachi]

Hi Paul,

I would recommend opening a TAC case and attach a whoami output so that we may review your HTTPs Inspection configuration.

Sincerely,

Edan Mudachi