Detect Protocol needs to be disabled in ProxySG or Advanced Secure Gateway or Web Security Service in UPE Mode

book

Article ID: 170608

calendar_today

Updated On:

Products

Web Security Service - WSS Advanced Secure Gateway Software - ASG ProxySG Software - SGOS

Issue/Introduction

You need to disable Detect Protocol in the Visual Policy Manager (VPM) for ProxySG or Web Security Service in Universal Policy Enforcement (UPE) Mode.

You may need to complete this action if a Symantec Support has advised you to do so.

Environment

  • Advanced Secure Gateway 
  • ProxySG 
  • Web Security Service (only in UPE Mode)

 

Resolution

Please do the following in VPM

  1. Create a Web Access layer
  2. Select a Source and Destination
  3. Under Action: Set > New > Disable SSL Detection > All Tunneled Traffic

Also see: Why doesn't a detect_protocol(no) rule work for some sites or applications when applied in the VPM?