how to block public proxy through WSA

[Przemyslaw Konitz]

hi All,

Question (same as topic).

I must say I was very disappointed when I found out that WSA doesn't handle public proxies properly. I mean situation when users gets all kind of unproper sites (like porn) through public proxy (i.e. hidemyass.com).

Am I missing sth in configuration or what? I use 7.0.0 version with all necessary (in my opinion) feature like Dynamic Content Analysis Engine but nevertheless it can still pass.

normal traffic to these sites are blocked as suspected but through public proxy its being bypassed (few proxies tested).

Why content analysis isn't working in the first place? I think there should be dedicated URL category regarding PROXY servers. Defining it manually is not an option.

Any suggestions to share with?

regards

Przemek

p.s. McAfee webgateway handles it right so why ironport doesn't ?

[hallvard.solem · Accepted solution]

Hi!

The URL category you are looking for is "Filter avoidance". We are using it and it works great!

[Przemyslaw Konitz]

Thx it works great (already tested).

I dunno why I missed it in the first place. It was hardly believed that sth simple as that could be missed by ironport

regards

Przemek