LevelBlue Knowledge Base

KB Home Search Latest Additions Most Popular

Knowledgebase

Home » Knowledgebase » HOWTO: How to bypass Authentication by header

HOWTO: How to bypass Authentication by header

Show/Hide Article Tools

This article applies to:

SWG 9.x
SWG 10.x

Question:

Some sites or programs require you to bypass Authentication in order for it to be accessed through the SWG appliance. For Example, Google Earth’s update mechanism will not allow the program to run if it cannot contact its host site, and the host site cannot be reached when using Authentication through the SWG.

Procedure:

To bypass authentication for our Google Earth example, we will bypass using the User-Agent header that Google Earth uses to access its host site.

-Navigate to Polices -> Condition Settings -> Header Fields

-Under Exclude by Headers click edit and enter the following information.

Header Name:

Condition:

Header Value:

- Save and Commit changes.

*note: in VSOS 9.0.0 you cannot add more than one user agent header name to the same Headers Field list. If you need to add more than one user agent you will need to create a separate list for each user agent entry.

-Other programs and hardware have been known to need to have authentication bypassed in order to be used. Here is the program and the Header name used to allow access.

Application	Header	Value	Expression
Google Earth	User-Agent	Regular Expression	^GoogleEarth.*
iPhone	User-Agent	Regular Expression	Apple iPhone.*
iPad	User-Agent	Regular Expression	Apple iPad.*
iTunes	User-Agent	Regular Expression	iTunes/.*
-	-	-	AppleCoreMedia/.*
Microsoft Updates	User-Agent	Equals	Windows-Update-Agent
-	-	Regular Expression	^MicrosoftBITS/.*
Adobe Flash	User-Agent	Regular Expression	^Adobe Flash Update.*