Announcement

Collapse
No announcement yet.

False positives on proxy detection

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • False positives on proxy detection

    Good day all,

    We are running 16.5.2 and we have had UT in place since 2010. It is the foundation of the network and I couldn't operate this network without it. At least in the way we run now. I love it.
    Curious issue has popped up. Somehow there are many users being detected as proxy use when there isn't one. I know this because one was my own. I do not allow proxies and accidently shut down about 30 innocent users.
    Normally this runs for weeks and months without a problem but I rebooted just now in case. We will see.
    Anybody know what's going on?
    Only those willing to risk going too far can discover how far they can go.

  • #2
    Originally posted by Paulo View Post
    Somehow there are many users being detected as proxy use when there isn't one.
    Detected by what? Where are you seeing this?

    Both Web Filter and Application Control rely on third-party definitions (for Categories and application signatures, respectively) so it's possible that the provider has incorrectly defined some traffic. In the case of Web Filter, it's more easily resolved using the 'suggest a different category' option on the Site Lookup tab and a temporary Pass Site rule. In Application Control, updates to definitions take a lot longer and you may need to get creative with Application Control Rules.
    Græme Ravenscroft • Technical Marketing Engineer
    ('gram', like the unit of measurement)
    he/him
    How can we make Arista ETM products better?

    Comment


    • #3
      Originally posted by Paulo View Post
      Good day all,

      We are running 16.5.2 and we have had UT in place since 2010. It is the foundation of the network and I couldn't operate this network without it. At least in the way we run now. I love it.
      Curious issue has popped up. Somehow there are many users being detected as proxy use when there isn't one. I know this because one was my own.
      Post a screen capture of the Webfilter blocked sessions.
      Attention: Support and help on the Untangle Forums is provided by
      volunteers and community members like yourself.
      If you need Untangle support please call or email [email protected]

      Comment


      • #4
        There is no blocking going on. I see the tag from the sessions list.
        Only those willing to risk going too far can discover how far they can go.

        Comment

        Working...
        X
        😀
        🥰
        🤢
        😎
        😡
        👍
        👎