View source for Enabling HTTPS Inspection causes remote applications to block automatically


== <span class="mw-headline" id="Overview">Overview</span> ==

Some remote applications like Remote desktop application(Anydesk and Teamviewer )''', '''Download managers, etc. get automatically block if HTTPS inspection is enabled. You don't require any policy or&nbsp;configuration&nbsp;for blocking purpose.

[[Access_Remote_Desktop_Applications_Through_SafeSquid|Access Remote Desktop Applications Through SafeSquid]]&nbsp;

== <span class="mw-headline" id="Prerequisites">Prerequisites</span> ==

HTTPS Inspection should&nbsp;be enabled on SafeSquid. If it is disabled, check&nbsp;our document - [https://docs.safesquid.com/wiki/Configure_HTTPS_Inspection How to configure HTTPS inspection&nbsp;]

Remote applications like Anydesk and Teamviewer&nbsp;should block&nbsp;automatically if HTTPS inspection is enabled. No need to configure any policy for blocking purpose.

<u>'''Note'''</u>''':&nbsp;'''It has been observed that Remote applications like Anydesk and Teamviewer get access to&nbsp;internet if not blocked by&nbsp;firewall. To control these type of Remote&nbsp;applications via SafeSquid&nbsp;proxy (Secure web gateway) you should first block&nbsp;it on the firewall.

{| border="0" cellpadding="1" cellspacing="1" style="width: 100%"
|-
| style="width: 977px" | 
== Configuration on Remote applications ==

| style="width: 287px" | &nbsp;
|-
| style="width: 977px" | 
*Set proxy settings on Anydesk application. 
*If authentication is enabled&nbsp;you have to specify Username and Password on Anydesk application. 
*Anydesk should&nbsp;not take auto proxy settings&nbsp;:&nbsp;If you set proxy in IE browser or chrome browser and you select "Try to detect the proxy server" option on anydesk, it should not take proxy automatically. You must have to configure proxy on anydesk application. 

| style="width: 287px" | &nbsp;
|-
| style="width: 977px" | <u>'''After doing above configuration you should restrict'''</u>
| style="width: 287px" | &nbsp;
|-
| style="width: 977px" | 
*Restrict Ammy admin 
*Restrict Team viewer 
*Restrict Webex 
*Restrict Splashtop 
*Restrict Anydesk 

| style="width: 287px" | &nbsp;
|-
| style="width: 977px" | 
<u>'''Note:'''</u>&nbsp;To block&nbsp;single application from above list please refer link&nbsp;[[Restrict_any_desk|Restrict Anydesk]]

Follow link to&nbsp;[[Allow_remote_applications_to_particular_users|Allow remote applications for&nbsp;particular users]]&nbsp;

<u>How to create policy without Application Signature</u>

*If application is not categorized under default Application Signatures, find User-agent&nbsp;using SafeSquid's extended logs or any other traffic capturing tool. 
*Add that User-agent or hostname of websites under Custom Setting > Request Types section. 
*Bind that created user group and Request Type in Access Profile section&nbsp;and specify the action as per the requirement. 

|}

&nbsp;