Social web controls - facebook commenting SSL inspection required?

rated by 0 users
Answered (Verified) This post has 2 verified answers | 6 Replies | 1 Follower

Top 75 Contributor
38 Posts
andrewg posted on 30 May 2012 4:35 AM

Hello,

I am trying to allow facebook on one of my policies, but only to view and not post comments.

This does not seem to work, on the realtime monitor it does not detect the comments category and just puts it under the social networking group.

Do the social web controls require SSL inspection to be switched on ?

 

Thanks, Andrew

|

Answered (Verified) Verified Answers

Top 10 Contributor
986 Posts
Trusted Users (MVP)
Verified by andrewg

When you visit Facebook, is it using HTTPS?  If so then yes.  Websense can't tell pieces of Facebook apart from others just by IP address.  Needs to be able to see the URL at least.

|
Top 10 Contributor
2,443 Posts
Editor
Moderator
Verified by andrewg

Social Web Controls requires that you have two components:

1. Websense Content Gateway

2. The outbound scanning options must be enabled.

JACOB SLOAN, CCNA, WCSE

 

|

All Replies

Top 10 Contributor
986 Posts
Trusted Users (MVP)
Verified by andrewg

When you visit Facebook, is it using HTTPS?  If so then yes.  Websense can't tell pieces of Facebook apart from others just by IP address.  Needs to be able to see the URL at least.

|
Top 75 Contributor
38 Posts

thanks, that does seem to confirm what I was seeing.

|
Top 75 Contributor
38 Posts

Hello again,

 

I think i might have jumped the gun.      I think it is correct that it will not spot a post etc over an SSL connection, however I have tried it with ssl inspect on and off,    I have also observered that the facebook user has the cboice to connect over ssl or not.

Thus the web controls do not appear to be working for us,   is this just us or is it a problem for everyone?

|
Top 10 Contributor
2,443 Posts
Editor
Moderator
Verified by andrewg

Social Web Controls requires that you have two components:

1. Websense Content Gateway

2. The outbound scanning options must be enabled.

JACOB SLOAN, CCNA, WCSE

 

|
Top 75 Contributor
38 Posts

I had:

 

Scan outbound Web content for bot and spyware phone home traffic, and,

Scan content from all sites (may noticeably impact system performance)

both unticked, I have ticked the scan outbound web, just to confirm do I need to tick both ?

Ticking just the one seems to have worked though.

 

|
Top 10 Contributor
2,443 Posts
Editor
Moderator

No,  just the Scan Outbound one. 

JACOB SLOAN, CCNA, WCSE

 

|
Page 1 of 1 (7 items)