Documentation | Support

Go to the table of contents Go to the previous page You are at the end of the document View or print as PDF
Firewall Redirect: Forwarding Traffic to the Forcepoint Cloud Service : Limitations and known issues
Limitations and known issues
Firewall Redirect | Forcepoint Web Security Cloud
The following items are the known limitations of using this method to direct traffic to the cloud service.
*
Certain websites might redirect from a single URL to multiple domains. This causes multiple redirects to proxy-login.blackspider.com for authentication, which may result in the number of redirects exceeding the browser redirect limit. If this occurs, the browser may display a "too many redirects" or "redirection loop" error page.
As a workaround, administrators can increase the redirect limit for Firefox and Internet Explorer, or users can refresh the page. See Increasing the browser redirection limit for more information.
*
The acceptable use policy button is not enabled in environments that use firewall redirect. This will be addressed in a future release.
*
When user authentication is enabled in a policy, decryption bypass is not possible, and SSL decryption bypass settings are ignored. It is, however, still possible to do authentication decryption bypass, which causes requests to be processed anonymously.
*
As internal IP addresses are not visible in deployments that use firewall redirect, authentication bypass based on internal IP address is not available. Likewise, policy enforcement based on internal IP address is not supported.
*
When using firewall redirection, Dropbox is not supported for use with the Protected Cloud Apps feature in Forcepoint Web Security Cloud.
*
Firewall redirect does not support automatic data center failover. This is planned for a future release. Where transparent redirection with automatic failover is required, please use the Forcepoint GRE or IPsec service.
*
SNI is required for HTTPS traffic when using transparent proxy.
*
Windows XP does not support SNI and is, therefore, not supported for Forcepoint Firewall redirect.
*
Encrypted Client Hello (aka Encrypted SNI) is not supported when using transparent proxy
Increasing the browser redirection limit
You may want to increase the redirection limit of users' browsers because certain websites might redirect from a single URL to multiple domains. This causes multiple redirects to proxy-login.blackspider.com for authentication, which can result in the number of redirects exceeding the browser redirect limit. If this occurs, the browser may display a "too many redirects" or "redirection loop" error page.
This section describes how to increase the browser redirection limit for Internet Explorer and Firefox.
 
* 
Note 
Google Chrome has a maximum redirect limit of 20, which cannot be changed.
Internet Explorer
The screenshots in this section are taken from the Microsoft Registry Editor in Windows 7.
Changing the redirection limit for Internet Explorer requires changes to the Windows Registry. Proceed with caution.
 
* 
Warning 
Errors in the Windows Registry can cause serious problems, including rendering the system unusable. Always back up the Windows Registry before making changes.
1.
Open the Windows Registry (Start > cmd > regedit).
2.
Navigate to the following location:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
3.
Right-click the folder and select New, then and select DWORD (32 bit).
4.
Rename the DWORD value to MaxHttpRedirects and modify the DWORD to decimal 80.
5.
Click OK.
Firefox
The screenshots in this section are taken from Mozilla Firefox version 40.
Use the Firefox configuration editor to update the redirection limit:
1.
Launch Firefox and type about:config in the address bar.
2.
Search for network.http.redirection-limit and double click it.
3.
Change the value to 80.
4.
Click OK.
 
 
 
 
 
 
 
©2022 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint. All other trademarks used in this document are the property of their respective owners.
Document last updated: June 13, 2022
 

Go to the table of contents Go to the previous page You are at the end of the document View or print as PDF
Firewall Redirect: Forwarding Traffic to the Forcepoint Cloud Service : Limitations and known issues
Copyright 2022 Forcepoint. All rights reserved.