Skip to content Skip to main navigation Skip to footer
Wavecrest Knowledge Base

Tag: authentication

Office 365 will not activate when browsers are set to go through CyBlock

Category: Administration

If you are attempting to activate your Office 365 products through CyBlock and are unsuccessful, please try the following steps:

  1. In your CyBlock interface, go to User Management – Authentication.
  2. Click the Bypass tab.
  3. Click the green plus icon to add a new bypass entry.
  4. Add the following two URLs to bypass authentication:

– For URL or Domain, enter *.microsoftonline.com (with asterisk). For User-Agent, enter * (asterisk).

– For URL or Domain, enter *.live.com (with asterisk). For User-Agent, enter * (asterisk).

This should now allow your products to activate properly.

Web page or application will not load through CyBlock

Category: Administration

When a Web page or application will not load, there is most likely a few possible things that could be in play. Many issues have to do with the site or content delivery network being blocked from another categorized site that is not part of the site you are trying to get to. Below are the troubleshooting steps:

  1. Is there a site being blocked by CyBlock?
    • Check the Real-Time Web Monitor for the IP address of the user in question, and also make sure you have the Authentication Challenge Requests (407) and the Authentication Type check boxes selected.
    • Do you see any URLs that appear in red? These URLs are blocked URLs and must be allowed in one of your filter policies or white lists.
  1. If there are no blocked sites, check for any 407s in the Real-Time Monitor.
    • Copy these URLs with 407s and add them to the User Management – Authentication – Bypass tab. Add the URL in question, with User Agent *.
    • Does the site now load?
  1.  If you have tried the above with still no success, try using another browser such as Firefox or Chrome.
    • Does it work with another browser other than Internet Explorer?
    • If it works with other browsers, it may be the Internet Explorer Compatibility Mode.
    • Open Internet Explorer, go to Tools – Compatibility View settings, and unselect the Display intranet sites in Compatibility View check box.
    • Does the Web page or application now load?

How to troubleshoot Web sites that do not authenticate

Category: Administration, Authentication Manager

This applies to CyBlock Software, CyBlock Appliance, and CyBlock Cloud.

If you have troublesome Web applications that fail to authenticate, you can turn off authentication for that specific IP address to determine if it is an authentication problem.

  1. Go to User Management – Authentication.
  2. On the Rules tab, create a rule as follows:
    • For the network definition, select IP Address/Subnet.
    • For the type of authentication, select Disabled.
    • Enter the IP address of the computer that is experiencing an issue.
    • Add the rule.
  3. Try to access the site again.

If the test is successful, that is, you are able to get to the site, the problem is authentication, and you can add the URL to the Bypassed list in the Authentication Manager.

If the test is unsuccessful, the issue is not authentication, but proxying/filtering. Contact Technical Support for assistance.

For CyBlock Cloud, customers will need to contact Technical Support to have troublesome URLs added to the Bypassed list.

 

See also:

Windows Update through the proxy

Category: Administration

If updates fail to run through the proxy, you will need to manually set proxy settings for Windows Update. Additionally, it may be necessary to bypass authentication for certain URLs in order for the updates to pass.

Setting Proxy Configuration for Windows Updates

  1. You can import proxy settings from Internet Explorer by opening a command prompt and entering the following:
    • netsh winhttp import proxy
  2. Additionally, you can manually set the proxy by opening a command prompt and entering the following:
    • netsh winhttp set proxy <Proxy Server>:<Port> “<Exclusion List>”

Bypassing Authentication for Windows Updates

  1. In the CyBlock interface, go to User Management – Authentication and click the Bypass tab.
  2. Add new bypass entries by clicking the green green button button.
  3. Create two separate entries using the following configurations (with asterisks as wildcards).
    • URL or Domain: *.microsoft.com             |  User-Agent: *
    • URL or Domain: *.windowsupdate.com   |  User-Agent: *

How to allow iTunes to bypass authentication

Category: Administration, Authentication Manager, Proxy Settings

Users configured to go through the proxy may experience connection issues with iTunes.

To allow iTunes to bypass authentication, two entries need to be added to the Authentication Manager.

  1. Open the CyBlock interface and navigate to User Management – Authentication¹ ².
  2. Select the Bypass tab.
  3. Click the green button green button in the upper right-hand corner to add a new bypassed entry.
    – For “URL or Domain,” enter *.apple.com (with asterisk). For “User-Agent,” enter an asterisk (iTunes/*). Click Add.
  4. Add a second bypassed entry.
    – For “URL or Domain,” enter an asterisk (*). For “User-Agent,” enter iTunes/* (with asterisk).

 

¹ For CyBlock version 9.0.5 and later: User Management – Authentication – Manager. Click Add new bypass entry at the bottom of the Bypassed list.

² For CyBlock version 6.8.3a and earlier: Advanced Settings – Proxy Settings – Authentication Manager. Click Add new bypass entry at the bottom of the Bypassed list.