Blocked Pages on HTTPS sites

[TronXP]

We are currently using Lightspeed filtering, when I blocked webpage is accessed using https, there is no web filter page that says "blocked" like on a http site, simply that the site can't be connected to.

 

I was sure when we were bloxx, that it would still show the blocked page even on https sites.

 

Could anybody with Bloxx, Smoothwall etc confirm if when you access blocked https sites that your schools block page is shown. Lightspeed seem to make out, this is not technologically possible.

[Garacesh]

We are currently using Lightspeed filtering, when I blocked webpage is accessed using https, there is no web filter page that says "blocked" like on a http site, simply that the site can't be connected to.

 

I was sure when we were bloxx, that it would still show the blocked page even on https sites.

 

Could anybody with Bloxx, Smoothwall etc confirm if when you access blocked https sites that your schools block page is shown. Lightspeed seem to make out, this is not technologically possible.

 

Can confirm. If you try to go to a blocked https:// site, you get our block page with Smoothwall.

It's definitely possible. As the connection is effectively being MITM'd, your proxy can give you whatever the heck content it feels like.

[Manny-Tech]

Are you using your Lightspeed filter 'inline' or as a 'proxy'? We've recently configured our Lightspeed Rocket in proxy mode so we can see what is being searched on Google services. It requires the creation of a PAC file but it's really straight forward, otherwise all we were seeing is StudentA is going to Google but as it's encrypted we couldn't see what they were searching.

 

I take it you'll be just decoding SSL and not decrypting in your scenario.

[TronXP]

It is inline, and only decrypting google in proxy mode via pac file.

[Manny-Tech]

Same as us then. Give me an example of a website you're not seeing a block page for and I'll check ours.

[Kbrown]

Hi TronXP,

 

The reason that you are not getting the block page back while accessing HTTPS sites is that you are using the rocket inline rather than a proxy. To get a block page returned you will need to use Lightspeed as a proxy. No inline filter not acting as trusted Mitm proxy can redirect encrypted traffic otherwise stealing bank details would be a breeze

 

If you need any help doing this or would like to discuss further then please PM me.

 

Thanks

[Electra]

According to https://community.lightspeedsystems.com/lessons/web-filter-module-settings-general/

 

"Because of the nature of SSL traffic, the Lightspeed Systems Rocket does not display the Access Page when blocking an HTTPS session."