How to block URL working on non-standard web port in Edge SWG (Proxy SG)

Products

• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

How you can only allow 80 and 443 ports for the URL

How you can block URLs that are working on custom ports

Environment

Advance Security Gateway

Edge SWG

ProxySG Software

 

Cause

By default proxy will allow all ports .there is requirement to only allow web ports 80 and 443 , And block other ports 

Resolution

1. Create a new Web Request Layer

2 Create a Destination host as a Combined Destination object.

In the Combined destination object, you can again click on new and create a Destination Host/Port

Just type port number 80 and save it

Similarly, you can create a 443 port

Now select both of the  Destination Host/Port objects 

3 Click on NEGATE to make it enabled

4 Select action as DENY

Your rule looks like this:

Install the policy 

Try to access any URL https://mydomain.com:6666 or http://mydomain.com:8888 it will be blocked by the policy