Deny based on Content Policy Language (CPL) condition "client.interface" is not working

Products

• SG-300
• SG-600
• SG-9000
• SG-900
• SG-S500
• SG-S400
• Secure Web Gateway Virtual Appliance
• SG-S200
• ProxySG Software - SGOS
• SWG VA-100

Issue/Introduction

The following scenario(s) are being encountered:

• A Content Policy Language (CPL) condition using "client.interface" on ProxySG or Advacned Secure Gateway (ASG) NOT matching

Cause

This is a bug #SG-5079 which is reported on SGOS 6.7.3.9.

Issue was related to static route placed on Proxy that was breaking client.interface CPL.

Environment

SGOS 6.7.3.x

Resolution

Upgrade to SGOS 6.7.4.5 or later to address this issue.