TL-R600VPN: Web Security Doesn't Seem To Work

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

TL-R600VPN: Web Security Doesn't Seem To Work

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
TL-R600VPN: Web Security Doesn't Seem To Work
TL-R600VPN: Web Security Doesn't Seem To Work
2020-12-23 15:27:54 - last edited 2021-04-18 10:23:30
Model: TL-R600VPN  
Hardware Version: V4
Firmware Version: 4.0.4 Build 20200313 Rel.41831

I cannot seem to configure the Web Security feature under Behavior Control to block downloads.

 

  Under the General section, I have Web Security enabled. I also have an entry under the Web Security List which is also enabled. I have "exe" entered as the File Suffix and Effective Time is set to Anytime. I can download any file.exe that I find without blocking. IP Group is set to this PC, but as a test, I changed IP Group to IPGROUP_LAN and then IPGROUP_ANY and still I can download exe files.

 

  What am I missing? Any help appreciated!

  0      
  0      
#1
Options
3 Reply
Re:TL-R600VPN: Web Security Doesn't Seem To Work
2020-12-25 10:13:15 - last edited 2021-04-18 10:23:30

Dear @urbnsr,

 

Web Security is based on HTTP, it will block downloading if the URL is based on HTTP connection and the file suffix is matched.

 

Upon your configuration, the web security module will check if the URL is HTTP connection first and check if there is ".exe".

If both are met, this downloading will be blocked.

 

For example, if the download link is like ftp://this.is.for.test/download.exe, it won't be blocked since it's based on FTP instead of HTTP.

If the download link is like https://this.is.for.test/download.exe, it won't be blocked since it's based on HTTPS.

If the download link is like http://this.is.for.test/download.exe, this will be blocked since it's HTTP connection and it contains ".exe".

 

Hope the information above is helpful.

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*
  0  
  0  
#2
Options
Re:TL-R600VPN: Web Security Doesn't Seem To Work
2020-12-25 12:24:26 - last edited 2021-04-18 10:23:30

Thank you @Fae 

 

  That would explain it. Are these facts documented some where? I don't remember reading this elsewhere.

  0  
  0  
#3
Options
Re:TL-R600VPN: Web Security Doesn't Seem To Work
2020-12-26 18:10:45 - last edited 2021-04-18 10:23:30

It seems it is very easy to download files that are not HTTP based. Any chance a future update could remove the HTTP requirement and any download that matches the file extension would be blocked? Thanks.

  0  
  0  
#4
Options