URL filter exceptions

[rolandshum]

I have a 525 and a Websense URL filter configured. The URL filter works in normal configuration. If Websense fails the Pix will pass the traffic straight out to the Internet. I have the "inside" interface of the Pix spanned to the Websense server. Now I can't seem to get certain addresses to bypass Websense. I have this statement in the Pix config;

filter url except 10.10.5.168 255.255.255.255 0.0.0.0 0.0.0.0

but that workstation still hits Websense. From what I understand the 10.10.5.168 workstation should now bypass Websense and be allowed out unfettered. Is the syntax incorrect or is there something else that needs to be configured?

[gfullage]

The statement syntax as you have shown seems correct, 10.10.5.168 should bypass the WebSense server and go straight out.

Are you using a proxy server in your scenario, cause if so then all packets will be coming from the proxy server address rather than the actual PC's IP address, and filtering them on a PC level will be impossible.

Other than that can you enable syslogging and send us the syslog entries when this particular PC tries to access an external web server.

[rolandshum]

Ok I'll enable syslogging and see what happens. I don't have a proxy so all the packets have a source address of the workstation.