GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » Content filter vs google.com (cantent filter doesnt block google)
Content filter vs google.com [message #145115] Mon, 25 February 2019 12:40 Go to next message
pavel-v is currently offline  pavel-v
Messages: 12
Registered: December 2018
Hallo,

I set up content filter in Kerio Control 9.2.9. I have rule where all content from certain IP is blocked. Simple as that when accessing web from the computer having certain IP all pages are blocked but google.com and youtube.com. I can even perform searching in google. Than I did a rule where destination is content is google.com and the comunication is forbidden. Again, google works. All other pages are blocked all right.

Why is that?

Thx. Pavel

Re: Content filter vs google.com [message #145126 is a reply to message #145115] Tue, 26 February 2019 05:49 Go to previous messageGo to next message
billybob is currently offline  billybob
Messages: 35
Registered: October 2018
I am assuming you are doing ssl scanning for content? Try disabling QUIC / UDP port 443 on firewall and see if that helps
Re: Content filter vs google.com [message #145169 is a reply to message #145115] Fri, 01 March 2019 14:49 Go to previous messageGo to next message
pavel-v is currently offline  pavel-v
Messages: 12
Registered: December 2018
I don see SSL scanning. There is only HTTPS filtering and it is not on. About QUIC will have to google for that.

As it is today with all trafic blocket the comter can access nothing I tested but youtube. Not even google as last time. As it is now considering the functionality is prety useless.
Re: Content filter vs google.com [message #145188 is a reply to message #145126] Tue, 05 March 2019 08:51 Go to previous messageGo to next message
PPG is currently offline  PPG
Messages: 182
Registered: February 2010
billybob wrote on Tue, 26 February 2019 05:49
I am assuming you are doing ssl scanning for content? Try disabling QUIC / UDP port 443 on firewall and see if that helps
Hi billybob,

How to disable QUIC on Kerio Control?
Could you please explain that?

Thank you.
Re: Content filter vs google.com [message #145199 is a reply to message #145115] Tue, 05 March 2019 21:03 Go to previous messageGo to next message
pavel-v is currently offline  pavel-v
Messages: 12
Registered: December 2018
QUIC is a tricky thing. The main object is that it is supported by Chrome. IE and Edge is not able to work on that.It doesnt even act the same in diferent Chrome browser.

I did a rule where there is UDP:80 and UDP:443 blocked from trusted local interfaces to internet interfaces. It do work. I am not exactly sure whether there will be a side consequence to this step.
Re: Content filter vs google.com [message #145200 is a reply to message #145188] Tue, 05 March 2019 21:42 Go to previous messageGo to next message
PPG is currently offline  PPG
Messages: 182
Registered: February 2010
Don't mind, just solved this.
Also managed to block Everything Google Very Happy

[Updated on: Tue, 05 March 2019 21:48]

Report message to a moderator

Re: Content filter vs google.com [message #146869 is a reply to message #145200] Tue, 22 October 2019 08:50 Go to previous message
ondrax is currently offline  ondrax
Messages: 1
Registered: October 2019
Hello, can you help where or how i can setup this rule? Thank you so much.
Previous Topic: https web consol do not work
Next Topic: another network on DMZ interface
Goto Forum:
  


Current Time: Sun Apr 02 03:55:51 CEST 2023

Total time taken to generate the page: 0.03384 seconds