Meraki Security Appliance not blocking specfic site

[kysumu]

Hey all. I have a Meraki MX-90 security appliance and for the most part it is working great. However, I have come across a website that it can't block.

 

https://sites.google.com/site/millseagles/home

 

Have any of you had a similar experience and/or can you block this website using your filtering? If you can block it, what filtering method do you use and what appliance are you using?

 

I tried lots of different combinations of Blocked URL wild cards with the Meraki technician, but it just wouldn't take it. They told me that it was to do with the certificate that google issues. Meraki use a certificate based webfilter to block https traffic. Google just issue a generic google certificate that applies to all of their sites, and if they were to block that certificate it would block all of the google sites and not just the one we need blocked. I have registered the website with Brightcloud and they reclassified it as games, but again, the Meraki is set to use top sites (1000 top websites) for the URL category list size and this website doesn't fall under that filter yet. You can turn on full filtering for the URL category list size, but they suggested I don't do that until they have implemented a firmware update sometime in this quarter. They said the full list option is a bit buggy and advised not to use it. So this might work, however, I'm not keen on implementing something that might make things worse.

[Oaktech]

I had a similar issue with my Palo, and i've just removed Https access to sites.google.com which seems to have done the trick.

[linola]

I think so Https we cannot removed and this is the official sites of Google. I try to block at my school this site https://sites.google.com/site/huntingunblockedgames/ but same not success but i asked many forum they are give me reply soon then i will be share with you...

[grant_girdwood]

You'll need a product that can perform full SSL decryption so that it can see the full path that is requested. Without SSL decryption the most they will see is that sites.google.com has been requested, the content and importantly the path will be encrypted so the Meraki appliance will be unable to see this content.

 

Hope this makes sense.

 

Cheers,

Grant

[linola]

Thanks for the Reply Grant Girdwood @ I try to unblocked https://sites.google.com/site/millseaglesw/ this site soon many article read it from online but still not success..