# \#secure-web-gateway **URL:** https://community.f5.com/tag/secure-web-gateway/469.md [Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md) --- ## [URL Filtering vs SWG](https://community.f5.com/t/url-filtering-vs-swg/13520)
**Author:** [@Piotr\_Lewandows](https://community.f5.com/u/Piotr_Lewandows)\ **Replies:** 4\ **Last updated:** [April 2, 2025, 5:34pm UTC](https://community.f5.com/t/url-filtering-vs-swg/13520 "2025-04-02T17:34:31Z")
Hi, I tried to find some more precise info about two additional features provided by SWG license (in compare to URL Filtering license) but there is not a lot available. According to my knowledge SWG license is offe… --- ## [Bypass SSL TMM ERR on SWG Explicit mode](https://community.f5.com/t/bypass-ssl-tmm-err-on-swg-explicit-mode/43174)
**Author:** [@tck2534](https://community.f5.com/u/tck2534)\ **Replies:** 1\ **Last updated:** [February 27, 2024, 12:31am UTC](https://community.f5.com/t/bypass-ssl-tmm-err-on-swg-explicit-mode/43174 "2024-02-27T00:31:51Z")
Hi guys I have an issue when I had configured for Bypass SSL log return like below Aug 10 14:23:20 bigip4 err tmm\[18992\]: 01870029:3: /Common/swg\_explicit\_auth:Common:7cc2ccbf: \[C\] 10.55.55.85:56516 → 203.131.212.1… --- ## [SSL Orchestrator Use Case: SWGaaS](https://community.f5.com/t/ssl-orchestrator-use-case-swgaas/67586)
**Author:** [@KevinGallaugher](https://community.f5.com/u/KevinGallaugher)\ **Replies:** 1\ **Last updated:** [October 3, 2022, 4:37pm UTC](https://community.f5.com/t/ssl-orchestrator-use-case-swgaas/67586 "2022-10-03T16:37:25Z")
Introduction BIG-IP 16.0 with SSL Orchestrator 9.0 has support for running Secure Web Gateway (SWG) “as a Service” inside the Service Chain. This allows you to take an existing F5 SWG solution and migrate or move it to t… --- ## [Per-Request policy Proxy Select and HTTPS](https://community.f5.com/t/per-request-policy-proxy-select-and-https/54074)
**Author:** [@dragonflymr](https://community.f5.com/u/dragonflymr)\ **Replies:** 2\ **Last updated:** [May 18, 2021, 3:12pm UTC](https://community.f5.com/t/per-request-policy-proxy-select-and-https/54074 "2021-05-18T15:12:56Z")
Hi, I can’t see any info about limitation for Proxy Select object in Per-Request Policy (PRP) to only http traffic. It’s working without issue for http request and pass them to upstream proxy. For https requests… --- ## [Question based on RSA](https://community.f5.com/t/question-based-on-rsa/43520)
**Author:** [@Eds1](https://community.f5.com/u/Eds1)\ **Replies:** 0\ **Last updated:** [April 15, 2021, 4:18am UTC](https://community.f5.com/t/question-based-on-rsa/43520 "2021-04-15T04:18:03Z")
1. Assume a public key for RSA encryption given by the pair (143, 11). Find the private key corresponding to this pair. --- ## [Bypass certificate check](https://community.f5.com/t/bypass-certificate-check/51267)
**Author:** [@GBurch](https://community.f5.com/u/GBurch)\ **Replies:** 2\ **Last updated:** [March 26, 2021, 10:48am UTC](https://community.f5.com/t/bypass-certificate-check/51267 "2021-03-26T10:48:17Z")
Is there any way that checking the certificate details could be bypassed in specific cases (e.g. a particular client/IP Address, particular URLs/domains) when using SWG as a Forward Proxy? We are trying to set up a Re… --- ## [Will F5 add to the ASM or AFM something like F5 SWG Response/Request Analytics ?](https://community.f5.com/t/will-f5-add-to-the-asm-or-afm-something-like-f5-swg-response-request-analytics/44890)
**Author:** [@Nikoolayy1](https://community.f5.com/u/Nikoolayy1)\ **Replies:** 0\ **Last updated:** [March 20, 2021, 10:09pm UTC](https://community.f5.com/t/will-f5-add-to-the-asm-or-afm-something-like-f5-swg-response-request-analytics/44890 "2021-03-20T22:09:29Z")
The request/response Analytics of the F5 SWG are something I think like antivirus scanning as described in 404 Page not found | BIG-IP Documentation . The F5 ASM can use ICAP to send files to external scanning devices bu… --- ## [Detect domain or URL in urlfilter\_blocked.inc page](https://community.f5.com/t/detect-domain-or-url-in-urlfilter-blocked-inc-page/51249)
**Author:** [@GBurch](https://community.f5.com/u/GBurch)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 3:58pm UTC](https://community.f5.com/t/detect-domain-or-url-in-urlfilter-blocked-inc-page/51249 "2021-02-12T15:58:57Z")
Is there a way to identify the domain or URL of the original request in the urlfilter\_blocked.inc page under per-request policied for a forward web proxy? There is code already (not sure if its built-in or part of cus… --- ## [Unusual requests initiated by /TSPD directory on f5 firewall](https://community.f5.com/t/unusual-requests-initiated-by-tspd-directory-on-f5-firewall/51445)
**Author:** [@caisys](https://community.f5.com/u/caisys)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 11:26pm UTC](https://community.f5.com/t/unusual-requests-initiated-by-tspd-directory-on-f5-firewall/51445 "2020-12-08T23:26:52Z")
I developed a website for a client who deployed it behind an F5 firewall. I noticed that when accessing the site for the fist time the home page is not served. Instead an blank html page with some java script files locat… --- ## [SWG Custom Block Page](https://community.f5.com/t/swg-custom-block-page/44097)
**Author:** [@LeonKennedy](https://community.f5.com/u/LeonKennedy)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 3:54pm UTC](https://community.f5.com/t/swg-custom-block-page/44097 "2020-07-10T15:54:25Z")
Is it possible to create a custom block page with SWG? I know how to do this with ASM but dont see similar options for SWG/APM? --- ## [SWG - Explicit Gateway](https://community.f5.com/t/swg-explicit-gateway/43190)
**Author:** [@tck2534](https://community.f5.com/u/tck2534)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 10:25am UTC](https://community.f5.com/t/swg-explicit-gateway/43190 "2020-07-02T10:25:30Z")
Hi everyone, I have something need to do with Secure Web Gateway (SWG) in Explicit proxy mode, When ending is deny, How can I add some hyperlinks for register user?, As I know we can modify only a text or color. --- ## [Help with F5 SWG and APM (Web Proxy function)](https://community.f5.com/t/help-with-f5-swg-and-apm-web-proxy-function/55570)
**Author:** [@Sunny\_s](https://community.f5.com/u/Sunny_s)\ **Replies:** 6\ **Last updated:** [March 9, 2020, 6:52pm UTC](https://community.f5.com/t/help-with-f5-swg-and-apm-web-proxy-function/55570 "2020-03-09T18:52:52Z")
Hi All I need your help on deploying F5 BIG-IP with SWG (Secure Web Gateway) and APM (Access Policy Manager) (i.e. Web Proxy) functionality using forward proxy feature. Can you please let me know how do I go about … --- ## [iRules appending after url](https://community.f5.com/t/irules-appending-after-url/56985)
**Author:** [@Ashraf1](https://community.f5.com/u/Ashraf1)\ **Replies:** 7\ **Last updated:** [February 12, 2020, 3:53pm UTC](https://community.f5.com/t/irules-appending-after-url/56985 "2020-02-12T15:53:06Z")
Hello F5 !!! I am newbie in the world of load balancing, apologies if I am posting a silly question. Recently I have published a https website, created a iRule to redirect from http to https using below when HTTP\_REQU… --- ## [Intelligent Proxy Steering - Office365](https://community.f5.com/t/intelligent-proxy-steering-office365/65319)
**Author:** [@Smithy](https://community.f5.com/u/Smithy)\ **Replies:** 41\ **Last updated:** [February 6, 2020, 12:13pm UTC](https://community.f5.com/t/intelligent-proxy-steering-office365/65319 "2020-02-06T12:13:09Z")
Introduction This solution started back in May 2015 when I was helping a customer bypass their forward proxy servers due to the significant increase in the number of client connections after moving to Office365. Luckily … --- ## [SWG, Kerberos Auth and identify users by credentials](https://community.f5.com/t/swg-kerberos-auth-and-identify-users-by-credentials/69103)
**Author:** [@Niels\_van\_Sluis](https://community.f5.com/u/Niels_van_Sluis)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 10:28am UTC](https://community.f5.com/t/swg-kerberos-auth-and-identify-users-by-credentials/69103 "2020-01-29T10:28:58Z")
Problem this snippet solves: When using SWG and NTLM Auth it’s possible to identify users by IP address or credentials. However, when using Kerberos Auth it isn’t possible to identify users by credentials. This iRule en… --- ## [URL Category Database Useless](https://community.f5.com/t/url-category-database-useless/53396)
**Author:** [@Joe\_L\_1](https://community.f5.com/u/Joe_L_1)\ **Replies:** 0\ **Last updated:** [January 24, 2020, 2:03pm UTC](https://community.f5.com/t/url-category-database-useless/53396 "2020-01-24T14:03:53Z")
I have been struggling with the extremely worthless WebSense URL Category database. I say this because categories like “Information Technology” have several sub-categories within it. The problem with categories like thes… --- ## [Inspecting HTTPS traffic via SWG and iRules not SSL profiles](https://community.f5.com/t/inspecting-https-traffic-via-swg-and-irules-not-ssl-profiles/50234)
**Author:** [@SergeyAU](https://community.f5.com/u/SergeyAU)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 3:12am UTC](https://community.f5.com/t/inspecting-https-traffic-via-swg-and-irules-not-ssl-profiles/50234 "2019-12-13T03:12:16Z")
Hello Our F5 is used as an application proxy. Clients connect to 8080 and F5 inspects the URLs via APM/SWG All good for HTTP traffic, but we are unable to get HTTPs inspection/blocks to work. Some applications cannot … --- ## [SWG iRule reading session variable](https://community.f5.com/t/swg-irule-reading-session-variable/51215)
**Author:** [@GBurch](https://community.f5.com/u/GBurch)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 10:36am UTC](https://community.f5.com/t/swg-irule-reading-session-variable/51215 "2019-12-10T10:36:58Z")
We are using Secure Web Gateway as a forward proxy server. One of the iRules we have in place is passing data to another iRule via the Query String in the URL, which is causing problems. I’m trying to change this so t… --- ## [F5 SSLo Forward Proxy Web Traffic to Solarwinds](https://community.f5.com/t/f5-sslo-forward-proxy-web-traffic-to-solarwinds/60430)
**Author:** [@pynot](https://community.f5.com/u/pynot)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 8:10am UTC](https://community.f5.com/t/f5-sslo-forward-proxy-web-traffic-to-solarwinds/60430 "2019-12-06T08:10:22Z")
Hi Community, Just want to ask below. We have a F5 SSLo Forward Proxy and would like to have the same Web Traffic Report in AVR module or SWG Report to another Server. May we know which Solarwinds Module should … --- ## [iRule Check if the URL is in a Custom URL Category](https://community.f5.com/t/irule-check-if-the-url-is-in-a-custom-url-category/51241)
**Author:** [@GBurch](https://community.f5.com/u/GBurch)\ **Replies:** 1\ **Last updated:** [December 4, 2019, 10:59am UTC](https://community.f5.com/t/irule-check-if-the-url-is-in-a-custom-url-category/51241 "2019-12-04T10:59:01Z")
I have an iRule which applies on when HTTP\_REQUEST However, I’d like to bypass this rule if the URL is in a certain URL Category. Is this possible? Many thanks --- ## [securing ssh with apm](https://community.f5.com/t/securing-ssh-with-apm/14508)
**Author:** [@kevin\_flynn\_180](https://community.f5.com/u/kevin_flynn_180)\ **Replies:** 15\ **Last updated:** [December 3, 2019, 1:43pm UTC](https://community.f5.com/t/securing-ssh-with-apm/14508 "2019-12-03T13:43:23Z")
Hey guys, Interesting idea I was presented with the other day. As an organization, we have pushed hard for MFA. We try to use it for new external apps, sites, etc. However, I just came up against a new one. A customer… --- ## [Forward explicit SSL proxy server](https://community.f5.com/t/forward-explicit-ssl-proxy-server/8973)
**Author:** [@Marvin\_129795](https://community.f5.com/u/Marvin_129795)\ **Replies:** 20\ **Last updated:** [November 20, 2019, 2:11pm UTC](https://community.f5.com/t/forward-explicit-ssl-proxy-server/8973 "2019-11-20T14:11:26Z")
Dear all, Trying to figure out why HTTPS traffic is not passing the forward proxy. I followed the following article, configured the HTTP and SSL profiles and the two virtual servers accepting HTTP and HTTPS traffic. T… --- ## [Does the F5 support cache peering functionality like Squid Proxy?](https://community.f5.com/t/does-the-f5-support-cache-peering-functionality-like-squid-proxy/48130)
**Author:** [@Joe\_G](https://community.f5.com/u/Joe_G)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 5:29pm UTC](https://community.f5.com/t/does-the-f5-support-cache-peering-functionality-like-squid-proxy/48130 "2019-10-31T17:29:23Z")
Do the F5 SWG support passing to upsteam proxies (F5, squid, or otherwise) like squid does with it’s cache\_peer settings? --- ## [Cannot edit "per-request policies" Request status 500](https://community.f5.com/t/cannot-edit-per-request-policies-request-status-500/39997)
**Author:** [@Spela\_317265](https://community.f5.com/u/Spela_317265)\ **Replies:** 5\ **Last updated:** [July 29, 2019, 1:37pm UTC](https://community.f5.com/t/cannot-edit-per-request-policies-request-status-500/39997 "2019-07-29T13:37:51Z")
Hello, I have some troubles to edit any block in any per-request policy. I tried it with all browsers. I always get an error “Server request for ‘editActionDialogue’ is failed: Request status=500”. I can not edit any … --- ## [Change Server SSL Profile within APM Policy based on Users group membership](https://community.f5.com/t/change-server-ssl-profile-within-apm-policy-based-on-users-group-membership/51140)
**Author:** [@antec42](https://community.f5.com/u/antec42)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 10:25am UTC](https://community.f5.com/t/change-server-ssl-profile-within-apm-policy-based-on-users-group-membership/51140 "2019-07-19T10:25:28Z")
Hi, We have a situation where we need to present a specific client certificate to a server on the Internet depending on a users group membership in the AD. We are using SWG for outbound Internet traffic. Is there any … --- ## [AMQP Cleartext Authentication](https://community.f5.com/t/amqp-cleartext-authentication/50620)
**Author:** [@wazir](https://community.f5.com/u/wazir)\ **Replies:** 0\ **Last updated:** [July 13, 2019, 4:06am UTC](https://community.f5.com/t/amqp-cleartext-authentication/50620 "2019-07-13T04:06:21Z")
Description The remote Advanced Message Queuing Protocol (AMQP) service supports one or more authentication mechanisms that allow credentials to be sent in the clear. Solution Disable cleartext authentication mechanis… --- ## [SSL Anonymous Cipher Suites Supported](https://community.f5.com/t/ssl-anonymous-cipher-suites-supported/50649)
**Author:** [@wazir](https://community.f5.com/u/wazir)\ **Replies:** 3\ **Last updated:** [July 8, 2019, 9:24pm UTC](https://community.f5.com/t/ssl-anonymous-cipher-suites-supported/50649 "2019-07-08T21:24:16Z")
The remote host supports the use of SSL/TLS ciphers that offer no authentication at all. Solution: Reconfigure the affected application, if possible to avoid the use of anonymous ciphers. openssl ciphers -v ssl-d… --- ## [Redis Server Unprotected by Password Authentication](https://community.f5.com/t/redis-server-unprotected-by-password-authentication/50595)
**Author:** [@wazir](https://community.f5.com/u/wazir)\ **Replies:** 0\ **Last updated:** [July 2, 2019, 9:25am UTC](https://community.f5.com/t/redis-server-unprotected-by-password-authentication/50595 "2019-07-02T09:25:06Z")
Solution : Enable the 'requirepass' directive in the redis.conf configuration file.check if Redis is working on the servers.$ redis-cli ping PONG #requirepass "xxxxxxxx" -- change the password of the user and uncomment… --- ## [SSL Certificate with Wrong Hostname](https://community.f5.com/t/ssl-certificate-with-wrong-hostname/50612)
**Author:** [@wazir](https://community.f5.com/u/wazir)\ **Replies:** 1\ **Last updated:** [June 30, 2019, 10:43pm UTC](https://community.f5.com/t/ssl-certificate-with-wrong-hostname/50612 "2019-06-30T22:43:38Z")
SSL Certificate with Wrong Hostname The SSL certificate for this service is for a different host. The commonName (CN) of the SSL certificate presented on this service is for a different machine. Purchase or generate a pr… --- ## [Office 365 Data Group builder using F5 Python SDK](https://community.f5.com/t/office-365-data-group-builder-using-f5-python-sdk/64799)
**Author:** [@Michael\_Everet1](https://community.f5.com/u/Michael_Everet1)\ **Replies:** 1\ **Last updated:** [June 25, 2019, 2:42am UTC](https://community.f5.com/t/office-365-data-group-builder-using-f5-python-sdk/64799 "2019-06-25T02:42:03Z")
Problem this snippet solves: Python script which pulls O365 URL’s/IP’s from microsoft published XML formatted list, parses into python dictionaries formatted for F5 data group, and uses F5 Python SDK to create or update… [Next page](https://community.f5.com/tag/secure-web-gateway/469.md?match_all_tags=true&page=1&tags%5B%5D=secure-web-gateway)