Avoid translating website to compromise Security Setting

[steinhoff]

Hello!

Just wonder wether there is any way to get this issue solved with a Ironport S360:

While translating websites via Webtools - lets say Google Translate - can be very useful for some people itcarries the risk to access webcontent wich is blocked be normal Access Policy.

Is there any way except completly deny the translating websites?

Thanks

Andreas

[edadios]

Hello Andreas,

I am not clear on your query.

Every url that a pc will try to access will be evaluated similarly by the proxy, based on traffic identity, and access policy configuration. So I am not sure what you mean that the translation will get to bypass the normal access policy.

There are multiple security functions, web url category, site content rating, web reputation score, AV scan for which access can be going through to effect security policy protection.

Maybe it will help if you can give examples exactly of how you think security is compromised. Provide urls, and provide what you are seeing, maybe based on access logs, that you are otherwise wanting to be processed differently.

Regards,

Eric

[steinhoff]

Hello Eric,

thanks for the response.

An example for the situation looks like this:

Users try to access a website wich is blocked by URL category

example: www.buffed.de wich is a games website

By policy this access is blocked due to the category games.

Using translate.google this website can be read.

Actually the design is lost, by you can still read.

For a games site this might be no big deal, if it comes to hate speech this can be a harm.

I know that this might be impossible to catch, but I don't want to miss the chance ;-)

Regards

Andreas

[edadios · Accepted solution]

Hello Andreas,

I tried

http://translate.google.com/translate?js=n&prev=_t&hl=en&ie=UTF-8&layout=2&eotf=1&sl=auto&tl=en&u=www.buffed.de

I see that all the games categories are still blocked.

There are however certain parts of the page that is not categorized as games. So they get through depending on what other categories is allowed through your WSA.

So I suggest making submission for the wrongly categorized parts, if you think there are any, in the succeeding page, using this tool. https://securityhub.cisco.com/web/submit_urls

Otherwise, as I guess you already know, the site http://translate.google.com, is categorized as "Web Page Translation", and can be blocked using the Cisco Ironport Web Usage Control predefined category.

1308723259.361 2 64.104.205.161 TCP_DENIED/403 1814 GET http://translate.google.com/ - NONE/- - BLOCK_WEBCAT_11-ericpol-ericpc-DefaultGroup-NONE-NONE-NONE - -,16:14:130,2011-06-22

Regards,

Eric

[steinhoff]

Hello Eric,

Thanks for evaluating this.

I wanted to keep the translating tool open for more business like websites ;-)

Will further check on the parts wich are not recognized.

thanks again

Andreas