Application Control configuration

[rockchick_uk]

It's not working..... not hitting the 'referer' criteria:

Am i doing something really obviously wrong?

[AaronT]

The referer header was blank. The page is also the sign-in for gmail. what happened after you entered valid credentials? Did it log you in or block you?

[rockchick_uk]

I typed 'mail.google.com' into the URL field, I saw it redirect to the 'accounts.google.com' URL and a block page was immediately sent from the proxy

[AaronT]

instead of Header.Get('referer') try instead Header.Request.Get('referer') (you could try header.response.get, but I think it's request you want)

[AaronT]

I've been bitten by the Header.Get() field before. I should've caught it earlier

[rockchick_uk]

Oh I think that was actually what was originally advised!  Thanks for spotting, will try that a bit later, thank you

[rockchick_uk]

That didn't work either - according to the trace, the referer field is still blank.  Not sure what else to try!

I can fall back to the custom Gmail categories, it just would have been nice to not rely on a static list in case gmail adds a few more URLs in future!

Any additional suggestions are welcome though!

Thanks 🙂

[AaronT]

That tells me that www.gmail.com isn't in the referer header (even if it redirects you). That URL (hxxps://accounts.google.com/*mail.google.com*) is categorized as webmail. Or, you could just block that link as a regex as i put in there

[rockchick_uk]

Can you explain a bit more what you mean about blocking the link as a regex?

[AaronT · Accepted solution]

url matches https://accounts.google.com/*mail.google.com*