HTTPS is everywhere, can´t handle

Use this forum to post questions relating to WinGate, feature requests, technical or configuration problems

Moderator: Qbik Staff

HTTPS is everywhere, can´t handle

Postby tito_gate » Oct 21 15 3:25 am

People of Wingate,

First of all, sorry about my English. I only know a few words in English.
I'm new in Wingate, at the present using the 30 days trial, waiting the results to buy licenses if successfull.
I need to allow user Access to YouTube, Google and some newspapers, and just that. I configure everything, the proxy server and the clients. Ok.
But those pages are https (YouTube, Google and others), and the results in the screen are really awful. The pages appears "broken", links everywhere, no images at all. I wish I could attach the YouTube page so you can check how bad appears onscreen.
I read a lot in the fórums about port 443, the problems with https, etc. but if this simply pages uses https, then we must handle in certain way. There are not Banks, is just YouTube!
I need help with this matter: how to allow comercial web pages that starting with https. If I quit all rules, the content is right. If I allow "just YouTube", the users can Access but in this "broken view".
Thank you in advance, I'll look forward heraing from you son.


Jorge
tito_gate
 
Posts: 8
Joined: Oct 21 15 3:10 am

Re: HTTPS is everywhere, can´t handle

Postby adrien » Oct 21 15 10:15 am

Hi Jorge

firstly, you need to make sure the clients / browsers are configured to use the proxy.

Then for proper blocking, you need to enable https inspection. this is because browsers (all of them) refuse to display block pages when they are setting up a tunnel to a remote server, so the only way to get a browser to behave is to intercept the https, let the browser make the tunneled request and then send the block page. This was changed in 8.5.0 so you should make sure you're running the latest version (currently 8.5.3).

Regards

Adrien
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland

Re: HTTPS is everywhere, can´t handle

Postby tito_gate » Oct 22 15 3:47 am

Thank you Adrien for your answer,

First of all, effectively, the clients / browsers are configured ok. The rules in Wingate are operational, but with the problem on-screen descripted above.
After that, you talk about "HTTPS Inspection". Right. I'm using the latest version of Wingate, but when I tried to go inside this item, the software replies is only available in Enterprise Edition of Wingate. Is this correct? I'm in the trial (Standard version) for a couple of weeks, but to handle https in commercial pages must I buy licenses of Enterprise Edition?
This could be a problem. Just for access control in a small network to a few web pages, must I buy Enterprise?
Thank you for your support,


Jorge
tito_gate
 
Posts: 8
Joined: Oct 21 15 3:10 am

Re: HTTPS is everywhere, can´t handle

Postby adrien » Oct 22 15 10:00 am

Hi

yes, https inspection is an enterprise feature.

You can get a 6 user enterprise license. The feature is available in a trial as well, it may warn about the feature, but it should still let you use it (unless your trial settings are set to Standard or Professional).

Regards

Adrien
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland


Return to WinGate

Who is online

Users browsing this forum: No registered users and 8 guests

cron