Troubleshooting HTTPS filtering

Sometimes HTTPS filtering does not work as expected. In this case check the following.

  • Check that your Squid proxy was compiled correctly and is able to perform HTTPS flltering. The easiest way to do that is to run squid -v and ensure the –enable-ssl, –enable–sslcrtd and ‘–enable-icap-client’ are present in the compilation options.
../../_images/squid_version9.png

The Admin UI of Web Safety shows Squid capabilities in Admin UI / Squid Proxy / General / Version .

../../_images/squid_version_webui9.png
  • Check that your browser is set to use Squid proxy for all protocols including HTTPS(SSL).
../../_images/browser_settings9.png
  • Ensure you have configured HTTPS filtering in Admin UI / Squid Proxy / HTTPS (SSL) / SSL Decryption Mode .
../../_images/ssl_on9.png
  • Check you are not using the policy (e.g. Relaxed policy) where Decrypt HTTPS / SSL Connections checkbox is cleared in Admin UI / Web Safety / Policies / Relaxed / Advanced .
../../_images/policy_advanced9.png