Endian 3.0 Web Filter not filtering correctly

[Guest]

[milan777]

I've set up Endian Firewall 3 (Community) with HTTP and HTTPS proxy. Generated and installed a Proxy certificate etc. I go to Web Filtering option, and set up Custom Black or White list. So I provided a list in Blocked sites entry like that:

.site1.com
.site2.com
.site3.com

and also tried without "." as prefix. The problem is that Web Filter in this list is filtering only site1, all other entries that I type are ignored. So it blocks only first entry. Also I tried to block all websites using "**", it didn't block anything. I installed version 2.5.2 , it didn't have that problem.

So is that a bug?

[dda]

You could do this in access policy as well, remember the actual sequence is important.  Is this not something that is covered in the URL filter.  I find it to be pretty comprehensive.

[rmoeckli]

@milan777

I experienced the same thin, web filter just takes care of the first entry, I could resolve this though by adding the rule over the access policy (deny-domain). Still I think there shouldn't be such an option in web filter if it is not working!

[rmoeckli]

Another issue I'm fighting with is: in webfiler enabled the URL Filter disabled jobs and shops. But some sites still get opened by the client.

Example:
Setting in access policy: filtername all to all AD-Group allow filterprofile
opening the site jobs.ch or tchibo.ch, sites open and are not filtered by the proxy, however the used Cyren URL Check identifies them correctly in these categories. What do I need to do, to block them. Other example with some gamming sites and porn sites are workin correct.

Version of Endian uptodate on 11th march 2015 Enterprise 50, urlfilter blacklist 10 march 2015

thx

[rmoeckli]

more insight:

checked on cyren.com the following sites: tchibo.de, amazon.de, ebay.de, hm.com, mediamarkt.de

all these sites are listed in the categorie: shopping

I set up to block them but still, some get blocked some not, is there not a strict bond from efw-squid to the database of cyren?

I could open these sites: tchibo.de, hm.com, mediamarkt.de