HSTS inspection watchguard

[Scifigirl]

Hi,

 

Our iPads use a transparent proxy and are not logged into, as expected with January things have gone wrong. We seem to have some issues with hsts inspection for google, (google not allowed but full address is) anyone have any idea how to fix?

 

thanks in advance

[synaesthesia]

Disable QUIC in your firewall/filter, should solve that. (May be an option to disable, you may need to add a firewall rule)

[Scifigirl]

Disable QUIC in your firewall/filter, should solve that. (May be an option to disable, you may need to add a firewall rule)

 

Can't find any way of doing this? WatchGuard are now saying that all clients need to authenticate? using iPads with no apple accounts or sign on.

[timbo343]

Can't find any way of doing this? WatchGuard are now saying that all clients need to authenticate? using iPads with no apple accounts or sign on.

 

Ah, if you had a Smoothwall, this is what you need to add:

 

[synaesthesia]

Dont know for Watchguard sorry

[altecsole]

Can't find any way of doing this? WatchGuard are now saying that all clients need to authenticate? using iPads with no apple accounts or sign on.

 

Can't you just create a rule to block UDP 80 and 443? That's what we do on our WatchGuard firewall.

[Scifigirl]

Can't you just create a rule to block UDP 80 and 443? That's what we do on our WatchGuard firewall.

already had udp blocked on 443 have now blocked on 80 but still cant make it work.

 

the sites work fine if you go to their direct address, but you can't "google" anything in the search engines

[Scifigirl]

Solution

 

ended up just putting in a bypass for google... hopefully it will stand up