Results 1 to 4 of 4
  1. #1
    Untanglit
    Join Date
    Jan 2010
    Location
    Edge of the bush
    Posts
    19

    Default False positives on proxy detection

    Good day all,

    We are running 16.5.2 and we have had UT in place since 2010. It is the foundation of the network and I couldn't operate this network without it. At least in the way we run now. I love it.
    Curious issue has popped up. Somehow there are many users being detected as proxy use when there isn't one. I know this because one was my own. I do not allow proxies and accidently shut down about 30 innocent users.
    Normally this runs for weeks and months without a problem but I rebooted just now in case. We will see.
    Anybody know what's going on?
    Only those willing to risk going too far can discover how far they can go.

  2. #2
    That Which Lurks Below
    Join Date
    Jul 2018
    Posts
    143

    Default

    Quote Originally Posted by Paulo View Post
    Somehow there are many users being detected as proxy use when there isn't one.
    Detected by what? Where are you seeing this?

    Both Web Filter and Application Control rely on third-party definitions (for Categories and application signatures, respectively) so it's possible that the provider has incorrectly defined some traffic. In the case of Web Filter, it's more easily resolved using the 'suggest a different category' option on the Site Lookup tab and a temporary Pass Site rule. In Application Control, updates to definitions take a lot longer and you may need to get creative with Application Control Rules.
    Græme Ravenscroft • Technical Marketing Engineer
    ('gram', like the unit of measurement)
    he/him
    Please don't reboot your NGFW.
    How can we make Arista ETM products better?

  3. #3
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,767

    Default

    Quote Originally Posted by Paulo View Post
    Good day all,

    We are running 16.5.2 and we have had UT in place since 2010. It is the foundation of the network and I couldn't operate this network without it. At least in the way we run now. I love it.
    Curious issue has popped up. Somehow there are many users being detected as proxy use when there isn't one. I know this because one was my own.
    Post a screen capture of the Webfilter blocked sessions.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  4. #4
    Untanglit
    Join Date
    Jan 2010
    Location
    Edge of the bush
    Posts
    19

    Default

    There is no blocking going on. I see the tag from the sessions list.
    Only those willing to risk going too far can discover how far they can go.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2