General
Using SSH Tunnels to Access the SafeSquid Admin Interface
SSH tunnelling, or SSH port forwarding, is a method of transporting arbitrary data over an encrypted SSH connection. SSH tunnels allow connections made to a local port (that is, to a port on your desktop) to be forwarded to a remote machine via a ...
Standard Operating Procedure (SOP) for Troubleshooting Issues in your SafeSquid proxy server
Purpose To provide a consistent and effective approach to troubleshooting network connectivity and web server issues using key commands. Scope This SOP applies to troubleshooting sessions involving DNS resolution, port connectivity, web server ...
Whitelisted Website Blocked
Issues The company policy is all the websites that come under the social network category are blocked for all employees, but the company wants to whitelist a few social networking websites. We add those websites to the whitelist category but still ...
Website blocked with Text analyzer
Issue The website is blocked due to the text analyzer. Solution You must add this website to the white list category using custom categories. Here are the steps: Refer to the link: How to allow specific websites through category. Access the SafeSquid ...
Unable to upgrade to the latest version
Issues Unable to upgrade to the latest SafeSquid version. Prerequisites Monit service should be up. Solution When you are not able to upgrade to the latest version of SafeSquid from the SafeSquid Interface follow the link: How to Upgrade SafeSquid to ...
Unable to login to specific website
Issues I can able to access https://www.facebook.com/ via proxy but not able to log on to it. I cannot able to login to a specific website using Facebook and Google+ credentials for login via proxy. I can able to log in on https://www.facebook.com/ ...
Unable to generate Support Tar-ball
Issue Unable to generate support tarball from SafeSquid Interface: Support Page > Support Tarball. Troubleshooting If you are not able to generate support tarball from the SafeSquid interface automatically follow the below steps. Go to this path ...
Unable to Generate Performance Plot
Issue Unable to generate performance plot from SafeSquid Interface: Support Page > Performance Plot Troubleshooting When you install SafeSquid Appliance Builder (SAB) to setup your secure web gateway, the required packages are also installed ...
SafeSquid Transparent Proxy
Overview The Internet is an essential part of most company’s business infrastructure. However, it can be a risky place, but there are ways to minimize risks so your business can thrive. Analysts encourage organizations to deploy a secure web gateway ...
SSO Authentication Fail
Troubleshooting If your configuration is exactly similar to How to and still your SSO authentication failed. 1. Make sure the User Name: administrator@safesquid.test (The user name should be any user from AD having administrative permissions) 2. ...
SSL Certification Errors
Issues with their Root Cause When the SSL certificate is imported into the Chrome browser and still shows Your connection is not secured for HTTPS sites. ->Policies in the HTTPS Inspection subsection may not be configured correctly. While the ...
SSL certificate downloaded with zero size OR unable to download SSL certificate
Issues SSL certificate downloaded with zero size Unable to download SSL certificate Note: If you generate new activation key from Self-Service Portal and activate SafeSquid using same activation key. And directly download SSL certificate from ...
Product Activation Failure
Issues I uploaded my activation key, but still, SafeSquid UI is showing Failed to set Subscription details. After uploading the activation key, I am getting the template on the browser proxy server refusing connections. Unable to see subscription ...
Not displaying anything on Reports Page
Issue Custom group name is taking time to update on Dashboard. Troubleshooting The dashboard information is obtained from SafeSquid databases. Some of the records on the dashboard are obtained from the Master table, whereas some records are obtained ...
LDAP Entries Not Fetched
Issue I configured LDAP with Active Directory, but still, LDAP entries are not fetched. Root Cause Case 1: You should not properly configure LDAP with Active Directory. Case 2: You are not able to contact AD (Active Directory). Verify it from ...
ISO installation Failure
Issues When you misconfigure any of your DNS IP, Gateway or NIC cards, you will face the issue "Failed to retrieve the pre-configuration file". The IP address that you assigned for the SafeSquid proxy is blocked because of the firewall, you will face ...
Interface Access Blocked- Access Denied
Issue You may get locked out yourselves whenever you are trying to create policies in the Access Restrictions section of SafeSquid. You suddenly get messages as Access Denied on the browser. Root Cause SafeSquid actually evaluates entries in the ...
Getting an Error "Proxy server refusing connections"
Issues I am trying to access the web through a proxy server and suddenly getting the error "Proxy server refusing connections". When I go to Restart the SafeSquid service from the SafeSquid interface, it displays the error "Proxy server refusing ...
Do Android proxy settings apply to all apps on the device
No, they do not apply globally and without root, there is no way to force a proxy to be used by all applications. The reason behind that is depends upon the application creator to respect the proxy settings and use them or do the wrong thing and ...
DNS Failure
Issue Via proxy sometimes an error "DNS Lookup for safesqddns.com failed" occurs. Root Causes If the FQDN of the website is incorrect. The local DNS server service is not running. If the forwarder DNS server is not able to resolve the query. If ...
Disk space and RAM is full on SafeSquid Server
Overview Manage disk space on the SafeSquid server. When any of the partitions that are used by SafeSquid are full, it results in undefined behaviour. This may lead to something like, SafeSquid failing in processing the connections. Prerequisites ...
Connection failure to websites
Issues When I access the website, it displays the connection failed error “Connection to 192.168.27.30:80 failed”. When I access https://abc.safesquid.com/ via proxy and log in using my corporate email ID, it displays the connection failed error ...
Certificate manageability
Overview The SafeSquid Self-Service Portal enables you to manage Trusted Root CA across all your SafeSquid Installations. You can Generate Self Signed Certificate, or upload your existing Enterprise CA. Read More about SSL certificates from the ...
Category update is not working
Issues I am trying to add new websites to the whitelist or blacklist category, but it is not updating. Uploaded a new file with some websites and added them to a specific category, but I did not find those websites in the respective category. ...
Authentication is not working
Issues If your LDAP configuration is improper, you should face an authentication issue. If your username or password is wrong, you should face an authentication issue. In the case of SSO authentication, if your access policies under the access ...
Application not working with HTTPS inspection
Business challenge The HTTPS inspection Bypass option enables you to define specific websites that are not subject to decryption as they flow through the proxy. Some websites may include personal identification information that should not be decrypt. ...
Application not working with Authentication
Issues Certain applications (like Dropbox®) do not work with authentication. Root Cause Certain applications (like Dropbox®) which do not support proxy authentication, want to bypass authentication for that application. Solution Follow the link to ...
Unblock the blocked website
Overview Some of the websites are blocked due to the entries created in the SafeSquid configuration. We don't know which security filter is the reason for blocking. We need to identify the filter and based on that create the new entry to allow the ...
Restart the SafeSquid Service from Terminal
Run the below command to restart the SafeSquid service from the terminal (Linux Box): /etc/init.d/safesquid restart
Restart the SafeSquid Service from Interface
Overview Restart your SafeSquid service without access to the Server. Prerequisites Make sure that the Monit service is running on your SafeSquid service. Check for monit service: pidof monit if you did not find the pid of monit then start the monit ...
Identify the filter name by using SafeSquid Block Template
Overview Find the filter name easily from the SafeSquid block template without analyzing the SafeSquid logs. Finding filter name