cancel
Showing results for 
Search instead for 
Did you mean: 

McAfee Web Gateway URL Filtering Bypass

Hi,

Can anybody comment on this

http://seclists.org/bugtraq/2012/Apr/117

Dec

6 Replies
McAfee Employee jschnell
McAfee Employee
Report Inappropriate Content
Message 2 of 7

Re: McAfee Web Gateway URL Filtering Bypass

Hello Dec,

yes, there was a mismatch between the two values. The newest MWG version 7.2 (release candidate) that was released yesterday contains already a fix for this. All other that can not or don't want to install this can help themself by adding the ruleset shown below. This will prevent the mismatch if placed at the top in the request cyle.

Bye

Jan

FixHostHeader.png

hbajaj
Level 9
Report Inappropriate Content
Message 3 of 7

Re: McAfee Web Gateway URL Filtering Bypass

I was not able to find release notes for 7.2 on the site? When will it be officially released?

McAfee Employee jscholte
McAfee Employee
Report Inappropriate Content
Message 4 of 7

Re: McAfee Web Gateway URL Filtering Bypass

Hi Heena,

The release notes can be found once you are logged into the cloud & content security portal at https://contentsecurity.mcafee.com/documentation_mwg7.

7.2 release is pending (within next two weeks).

Best,

Jon

Re: McAfee Web Gateway URL Filtering Bypass

It was just released some minutes ago

hbajaj
Level 9
Report Inappropriate Content
Message 6 of 7

Re: McAfee Web Gateway URL Filtering Bypass

So does below section of resolved issues, in release notes 7.2, address this bug?

"In responses that contained a VIA header this header was not removed,although a rule set and rule with the Header.RemoveAll event was enabled.(670020)"

Re: McAfee Web Gateway URL Filtering Bypass

hi all

I want to allow web site which is genuine but blocked by URL database before re-categories in McAfee Database.

Please guide

Note: I don't want to white-list website.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator