Block specific website through SafeSquid

From Secure Web Gateway
Share/Save/Bookmark
Revision as of 13:02, 13 February 2018 by Umashankar (talk | contribs)
Jump to: navigation, search

Client Scenario

Stark tech is having 200 employees.Stark tech distribute all 200 employees into different 'User Groups'. Now Stark tech wants to blocked specific websites for defined 'User Group' say 'MANAGERS'

Stark tech challenges are:

  • All Managers should not allow to access specific websites e.g. Facebook.com.When managers access those websites should get blocked template.
  • Suppose website like 'google' (search engine) is blocked for defined User groups.The users of that user group should not be able to access google.com,google.co.in,google.co.uk.

Solution

The SafeSquid Custom Category feature is a solution that proposed for Stark tech.
The solution is 'blacklist' mentioned websites from Custom Category and apply Do not bypass action to it.
Suppose you want to block 'facebook.com'.

Create Custom Category : blacklist and apply Action: Do not bypass So that you should get block template.
 

Note:

If you blacklist 'google' it will match google.com,google.co.in,google.co.uk
But if you blacklist 'google.com' then google.co.in will not match.

Prerequisites

HTTPS Inspection should be enabled in SafeSquid. If not enabled , you can check our document - <a href="Configure%20HTTPS%20Inspection">How to enable HTTPS Inspection</a>

Note : Even though HTTPS inspection is disabled it will work. But  it will not show the block template.

Enable SScore as TRUE which is under application setup(By default SScore should be Enabled as TRUE)

<tbody> </tbody>
<tbody> </tbody>

<a href="Access%20The%20SafeSquid%20User%20Interface">Access SafeSquid interface</a>

Go to configure page

<img alt="BlacklistSlide1 (1).PNG" class="fck_mw_border fck_mw_center" src="/images/f/f1/BlacklistSlide1_%281%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (1).PNG" />

 

Go to  Categorize Web-Sites under Custom Settings

<img alt="BlacklistSlide1 (2).PNG" class="fck_mw_border fck_mw_center" src="/images/9/93/BlacklistSlide1_%282%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (2).PNG" />

 

 

 

<img alt="BlacklistSlide1 (3).PNG" class="fck_mw_border fck_mw_center" src="/images/1/17/BlacklistSlide1_%283%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (3).PNG" />

 

<img alt="BlacklistSlide1 (4).PNG" class="fck_mw_border fck_mw_center" src="/images/0/08/BlacklistSlide1_%284%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (4).PNG" />

 

Add your website to the custom category

 

<img alt="BlacklistSlide1 (5).PNG" class="fck_mw_border fck_mw_center" src="/images/0/0a/BlacklistSlide1_%285%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (5).PNG" />

 

 

<img alt="BlacklistSlide1 (7).PNG" class="fck_mw_border fck_mw_center" src="/images/4/48/BlacklistSlide1_%287%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (7).PNG" />

 

 

Go to Access Profiles in Restriction Policies

<img alt="BlacklistSlide1 (8).PNG" class="fck_mw_border fck_mw_center" src="/images/3/32/BlacklistSlide1_%288%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (8).PNG" />

 

 

<img alt="BlacklistSlide1 (9).PNG" class="fck_mw_border fck_mw_center" src="/images/c/c6/BlacklistSlide1_%289%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (9).PNG" />

 

<img alt="BlacklistSlide1 (10).PNG" class="fck_mw_border fck_mw_center" src="/images/a/a6/BlacklistSlide1_%2810%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (10).PNG" /><img alt="BlacklistSlide1 (11).PNG" class="fck_mw_border fck_mw_center" src="/images/3/36/BlacklistSlide1_%2811%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (11).PNG" />

<img alt="BlacklistSlide1 (12).PNG" class="fck_mw_border fck_mw_center" src="/images/9/9c/BlacklistSlide1_%2812%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (12).PNG" /><img alt="BlacklistSlide1 (13).PNG" class="fck_mw_border fck_mw_center" src="/images/f/fc/BlacklistSlide1_%2813%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (13).PNG" /><img alt="BlacklistSlide1 (14).PNG" class="fck_mw_border fck_mw_center" src="/images/3/3a/BlacklistSlide1_%2814%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (14).PNG" /><img alt="BlacklistSlide1 (15).PNG" class="fck_mw_border fck_mw_center" src="/images/3/31/BlacklistSlide1_%2815%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (15).PNG" /> <img alt="BlacklistSlide1 (16).PNG" class="fck_mw_border fck_mw_center" src="/images/a/aa/BlacklistSlide1_%2816%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (16).PNG" /><img alt="BlacklistSlide1 (17).PNG" class="fck_mw_border fck_mw_center" src="/images/7/79/BlacklistSlide1_%2817%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (17).PNG" /> <img alt="BlacklistSlide1 (18).PNG" class="fck_mw_border fck_mw_center" src="/images/1/1b/BlacklistSlide1_%2818%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (18).PNG" /><img alt="BlacklistSlide1 (19).PNG" class="fck_mw_border fck_mw_center" src="/images/a/a5/BlacklistSlide1_%2819%29.PNG" style="vertical-align:middle" title="BlacklistSlide1 (19).PNG" />

 

 

How To