Authentication rule is not matched

Products

• ISG Proxy

Issue/Introduction

VPM authentication bypass rule similar to config shown below is not matched when Edge SWG receives traffic to example.com:

define category Category_test
    example.com
end

define condition Auth_bypass
http.connect.host.category=(Category_test)
end

<Proxy>
Condition=Auth_bypass authenticate(no)

Environment

• Explicit Edge SWG setup
• Condition uses "HTTP Connect URL Category" object

Cause

"HTTP Connect URL Category" object is not meant to be used in authentication rules.

Resolution

To resolve the issue, instead of using "HTTP Connect URL Category", please use "Request URL Category" object.