Explicit Edge SWG(ProxySG) - Receiving browser's error page instead of proxy exception page

Products

• ProxySG Software - SGOS

Issue/Introduction

When the ProxySG is deployed explicitly and policy rules are set to deny certain pages with a proxy exception page.

When the denied page is accessed we're receiving an connection error page from browser but not the ProxySG's denied page.

 

Cause

This is caused since detect protocol for Explicit HTTP is not enabled. For HTTPS web sites the Edge SWG (ProxySG) will need to be SSL Intercepting the web site in order to display the custom exception page.

 

Resolution

Enabled detect protocol for the Explicit HTTP Proxy service listener and ensure in the policies that the domain in question is being SSL Intercepted. After this has been enabled the ProxySG will start show the correct proxy's denied page or if there is custom exception page in place, it will show the custom exception page.

 

To enable detect protocol:

1. Browse to the management console of the ProxySG being utilized
2. Navigate to: Configuration > Services > Proxy Services
3. Expand the Normal service group
4. Select Explicit HTTP
5. Click the Edit button
6. Checkbox Detect Protocol
7. Click OK
8. Save changes