Forum Discussion

gavin84_31753's avatar
gavin84_31753
Icon for Nimbostratus rankNimbostratus
Mar 04, 2015

Forward Proxy with Websense Support

Has anyone successfully deployed this websens iAPP solution? We are on LTM-6900F and we do not have APM.

 

https://devcentral.f5.com/wiki/iApp.Generic-Forward-Proxy-with-Websense-Filtering-iApp.ashx

 

It appears to work just fine for regular "Get" requests using http/80 but when using SSL/443 with the "connect" method sites that should be blocked such as facebook.com:443 are allowed. A HTTP 1.1 200 ok is received as soon as we browse to the site, and no redirect is sent from Websense to the block page. Browsing to facebook.com:80 does get blocked fine.

 

There isn't a whole lot of information on this. And I do see where APM is capable of doing this all internal. Any assistance would be appreciated.

 

1 Reply

  • Jeremiah_Fowle2's avatar
    Jeremiah_Fowle2
    Historic F5 Account
    Gavin - This is due to the request being encrypted. The packet must be decrypted for logic to be leveraged against the client request.