Detect Protocol needs to be disabled in Edge SWG (ProxySG) or Advanced Secure Gateway or Cloud SWG (WSS) in UPE Mode

Products

• Cloud Secure Web Gateway - Cloud SWG
• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

You need to disable Detect Protocol in the Visual Policy Manager (VPM) for Edge SWG (ProxySG) or Web Security Service in Universal Policy Enforcement (UPE) Mode.

You may need to complete this action if a Symantec Support has advised you to do so.

Environment

• Advanced Secure Gateway 
• Edge SWG (ProxySG) 
• Cloud SWG (WSS) (only in UPE Mode)

 

Resolution

Please do the following in VPM

1. Create a Web Access layer
2. Select a Source and Destination
3. Under Action: Set > New > Disable SSL Detection > All Tunneled Traffic

Also see: Why doesn't a detect_protocol(no) rule work for some sites or applications when applied in the VPM?