General
Using SSH Tunnels to Access the SafeSquid Admin Interface
SSH tunnelling, or SSH port forwarding, is a method of transporting arbitrary data over an encrypted SSH connection. SSH tunnels allow connections made to a local port (that is, to a port on your own desktop) to be forwarded to a remote machine via a ...
Standard Operating Procedure (SOP) for Troubleshooting Issues in your SafeSquid proxy server
Purpose: To provide a consistent and effective approach to troubleshooting network connectivity and web server issues using key commands. Scope: This SOP applies to troubleshooting sessions involving DNS resolution, port connectivity, web server ...
White listed website is blocked
Issues The company policy is all the websites which are comes under social network category are blocked for all the employees but company wants to whitelist few social networking websites. We add those websites in whitelist category but still while ...
Website blocked with Text analyzer
Issue Website is blocked due to text analyzer Solution You need to add this website to the white list category by using custom categories refer the below link How to allow specific website though category Access the SafeSquid interface Go to ...
Unable to upgrade to the latest version
Issues Unable to upgrade to the latest SafeSquid version Prerequisites Monit service should be up. Solution When you are not able to upgrade latest version of SafeSquid from SafeSquid Interface follow the link How to Upgrade SafeSquid to A Newer ...
Unable to login to specific website
Issues I can able to access https://www.facebook.com/ via proxy but not able to login on it I cannot able to login to specific website using Facebook and google+ credential for login via proxy. I can able to login on https://www.facebook.com/ but not ...
Unable to generate Support Tar-ball
ISSUE Unable to generate support tarball from SafeSquid Interface : Support Page > Support Tarball Troubleshooting If you are not able to generate support tarball from SafeSquid interface automatically follow below steps. Go to this path (location of ...
Unable to generate Performance plot
ISSUE Unable to generate performance plot from SafeSquid Interface: Support Page > Performance Plot Troubleshooting When you install SafeSquid Appliance Builder (SAB) to setup your secure web gateway, the required packages also installed ...
Transparent proxy
Overview Internet is an essential part of most company’s business infrastructure. However, it can be a risky place, but there are ways to minimize risks so your business can thrive. Analysts encourage organizations to deploy a secure web gateway ...
SSO authentication Fail
Troubleshooting If your configuration is exactly similar to How to and still your SSO authentication is failed 1.Make sure User Name: administrator@safesquid.test (User name should be any user from AD having administrative permissions) 2.Monit ...
SSL certification errors
Issues with their Root Cause When SSL certificate imported into chrome browser and still shows Your connection is not secured for HTTPS sites. ->Policies in HTTPS Inspection subsection may not be configured correctly. While successful configuration ...
SSL certificate downloaded with zero size OR unable to download SSL certificate
Issues SSL certificate downloaded with zero size Unable to download SSL certificate Note: If you generate new activation key from Self-Service Portal and activate SafeSquid using same activation key. And directly download SSL certificate from ...
Product Activation Failure
Issues I uploaded my activation key, still SafeSquid UI is showing Failed to set Subscription details After uploading the activation key, I am getting the template on browser proxy server refusing connections Unable to see subscription details on ...
Not displaying anything on Reports Page
ISSUE Custom group name is taking time to update on Dashboard Troubleshooting The dashboard information is obtained from SafeSquid databases. Some of the records on dashboard is obtained from Master table, whereas some records are obtained from ...
LDAP entries are not fetched
ISSUES 1: I configured LDAP with Active Directory, still LDAP entries are not fetched. Root Cause: You should not properly configured LDAP with Active Directory Verify it from SafeSquid Logs. POST http://safesquid.cfg/ HTTP/1.1 Host: safesquid.cfg ...
ISO installation Failure
Issues When you misconfigured any of your DNS IP, Gateway or the NIC card, you will face issue as "Failed to retrieve the pre-configuration file". IP address which you assigned for SafeSquid proxy if blocked because of firewall, you will face issue ...
Interface access blocked- Access Denied
Issues You may get locked out yourselves whenever you are trying to create policies in the Access Restrictions section of SafeSquid. You suddenly get messages as Access Denied on browser Root Causes SafeSquid actually evaluates entries in the Access ...
Getting an error Proxy server refusing connections
Issues I am trying to access the web through proxy server and suddenly getting error "Proxy server refusing connections". When I am going to Restart SafeSquid service from SafeSquid interface, it is displaying error "Proxy server refusing ...
Do Android proxy settings apply to all apps on the device
No, they do not apply globally and without root there is no way to force a proxy to be used by all applications. The reason behind that it is depend upon application creator to respect the proxy settings and use them or do the wrong thing and ignore ...
DNS failure
Issue: Via proxy sometimes occur an error "DNS Lookup for safesqddns.com failed". Root Causes If the FQDN of the website is incorrect. Local DNS server service is not running. If forwarder DNS server not able to resolve the query. If network service ...
Disk space and RAM is full on SafeSquid server
Overview Manage disk space on SafeSquid server. When any of the partitions that are used by SafeSquid are full, it results in undefined behavior. This may lead to something like, SafeSquid failing in processing the connections. Prerequisites Give the ...
Connection failure to websites
Issues When I access website, it is displaying connection fail error “Connection to 192.168.27.30:80 failed” When I access https://abc.safesquid.com/ via proxy and login using my corporate email ID, it is displaying connection fail error “Connection ...
Certificate manageability
Certificate manageability The SafeSquid Self-Service Portal enables you to manage Trusted Root CA across all your SafeSquid Installations. You can Generate Self Signed Certificate, or upload your existing Enterprise CA Read More about SSL ...
Category update is not working
Issues I am trying to add new websites to whitelist or black list category, but it is not updating Uploaded a new file with some websites and added to specific category, but i did not find that websites in the respective category SafeSquid interface ...
Authentication is not working
Issues If your LDAP configuration is improper, you should face authentication issue If your user name or password is wrong, you should face authentication issue In case of SSO authentication if your access policies under access restriction section ...
Application not working with HTTPS inspection
Business challenge The HTTPS inspection Bypass option enables you to define specific websites that are not subject to decryption as they flow through the proxy. Some websites may include personal identification information that should not be decrypt. ...
Application not working with Authentication
Issues Certain applications (like dropbox) not working with authentication. Root Cause Certain applications (like dropbox) which does not support proxy authentication, they want to bypass authentication for that application. Solution Follow the link ...
Unblock the blocked website
Overview Some of the websites are blocked due to the entries created in SafeSquid configuration. We don't know which security filter is reason for blocking. We need to identify the filter and based on that create the new entry to allow the blocked ...
Restart the SafeSquid Service from Terminal
Run below command to restart the SafeSquid service from the terminal (Linux Box) /etc/init.d/safesquid restart
Restart the SafeSquid Service from Interface
Overview Restart your SafeSquid service without access to the Server Prerequisites Make sure that Monit service is running on your SafeSquid service. Check for monit service: pidof monit if you did not find pid of monit then start the monit - ...
Identify the filter name by using SafeSquid Block Template
Overview Find the filter name easily from the SafeSquid block template without analyzing the SafeSquid logs Finding filter name