POST request not showing in the logs, for mail.google.com, even though SSL Visibility appliance successfully decrypts the traffic.

Products

• ProxySG Software - SGOS

Issue/Introduction

POST request not showing in the logs, for mail.google.com, even though SSL Visibility appliance successfully decrypts the traffic.

Cause

Investigating the sysinfo config, the following would may show up and the highlighted condition would prevent the POST request from showing up in the logs.

<SSL-Intercept>
; If the server requests a client certificate, tunnel the SSL traffic via SSL proxy
  client.certificate.requested=yes ssl.forward_proxy(no)

define condition DetectProtoNo
url.domain="google.com"

Resolution

Create following policy, to have the post logs are show up in proxy logs.

<proxy>
Condition=Protocol_Detection detect_protocol(yes)
define condition Protocol_Detection
url.domain=1drv.com
url.domain=mail.google.com

end