Go Back   Team-BHP > Around the Corner > Shifting gears > Gadgets, Computers & Software


Closed Thread
 
Thread Tools Search this Thread
Old 23rd August 2012, 08:50   #46
Senior - BHPian
 
Join Date: May 2007
Location: Bangalore
Posts: 3,652
Thanked: 242 Times
Default Re: Office Websense blocks TBHP.

Quote:
Originally Posted by Zappo View Post
Our office proxy uses websense for filtering out various sites. This is mainly done using generic descriptions. TBHP also gets blocked as websense sternly says that "Forums and Message Boards are not allowed". Guys, could not we do something about this?
Method 1 (Simple if works)

Can you try downloading Opera browser and enabling the Turbo mode in it.

Method 2: Use Proxy


Use HMA's Web proxy :- HMA's Web Proxy(http://www.hidemyass.com/proxy/)

Intermediate Method :

Grab a IP:PORT from - HMA's Proxy List

Use that proxy in your browsers Proxy settings.

Method 3: Use Tor

What is Tor?

Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.

Its just a simple browser per-configured to use tor network.(https://www.torproject.org/download/...d-easy.html.en)

Install Tor like you install any other software. A Firefox Instance will start and you should be free to go to any site.

There are other paid methods too like using VPN and SSH but any corporate policy will block that from within the network.

Let us know if anything works.

Last edited by dadu : 23rd August 2012 at 09:03.
dadu is offline  
Old 23rd August 2012, 10:08   #47
Distinguished - BHPian
 
jkdas's Avatar
 
Join Date: Sep 2005
Location: Thiruvananthapu
Posts: 9,635
Thanked: 1,343 Times
Default Re: Office Websense blocks TBHP.

OT,I wont recommend people to use proxy bypass stuff etc at Corporate office. They might end up sitting at home without a job.
jkdas is offline  
Old 23rd August 2012, 10:30   #48
Team-BHP Support
 
tsk1979's Avatar
 
Join Date: Feb 2005
Location: New Delhi
Posts: 22,850
Thanked: 15,406 Times
Default Re: Office Websense blocks TBHP.

There is always https available. Most firewalls do not block https
tsk1979 is offline  
Old 23rd August 2012, 11:48   #49
Senior - BHPian
 
NetfreakBombay's Avatar
 
Join Date: Jan 2008
Location: Bombay
Posts: 1,375
Thanked: 315 Times
Default Re: Office Websense blocks TBHP.

Quote:
Originally Posted by tsk1979 View Post
There is always https available. Most firewalls do not block https
OP mentioned WebSense.

WebSense is pretty good with https. It can inspect all traffic on https and can block / modify / cache / archive https requests as required. Basically does exactly what https tries to prevent (man-in-the-middle).

http://kb.websense.com/pf/12/webfile...inarSlides.pdf

Look at slide 16 onwards.
NetfreakBombay is offline  
Old 23rd August 2012, 12:04   #50
Team-BHP Support
 
Samurai's Avatar
 
Join Date: Jan 2005
Location: B'lore-Manipal
Posts: 22,042
Thanked: 13,488 Times
Default Re: Office Websense blocks TBHP.

Quote:
Originally Posted by NetfreakBombay View Post
OP mentioned WebSense.

WebSense is pretty good with https. It can inspect all traffic on https and can block / modify / cache / archive https requests as required. Basically does exactly what https tries to prevent (man-in-the-middle).
I was a little stunned when I read this. If web-sense could decrypt the https, that undermines the very basis of RSA key encryption.

Then in page 31, I understood what they are doing. The browser is not getting the actual webserver SSL certificate at all. It is getting a fake internal certificate from websense. That is how websense can decrypt it. After inspection, websense will re-encrypt with the actual webserver certificate and send it over. Same process is repeated for returning data. Hmm, so much for privacy. That means it is better to avoid logging into banking websites at work. Not sure how much inspection power websense provides the administrator.
Samurai is offline  
Old 23rd August 2012, 15:03   #51
Senior - BHPian
 
myavu's Avatar
 
Join Date: Jan 2009
Location: New Delhi - Kochi
Posts: 1,057
Thanked: 515 Times
Exclamation Re: Office Websense blocks TBHP.

Best solution is to setup a Office to Home - http tunneling service

Cheers!

Vinu
myavu is offline  
Old 24th August 2012, 00:31   #52
Senior - BHPian
 
NetfreakBombay's Avatar
 
Join Date: Jan 2008
Location: Bombay
Posts: 1,375
Thanked: 315 Times
Default Re: Office Websense blocks TBHP.

Quote:
Originally Posted by myavu View Post
Best solution is to setup a Office to Home - http tunneling service
Do not actually do that If some office is willing to spend $50k - $2M on WebSense /BlueCoat et el, they will have monitoring for such. If a http / https address is used ONLY by few users and used frequently; this would be one of the first things to get flagged in daily reports.

Quote:
Originally Posted by Samurai View Post
I was a little stunned when I read this. If web-sense could decrypt the https, that undermines the very basis of RSA key encryption.
These algorithms have not been breached yet, and that provides a good smoke screen. However, implementations of security around these algo have been broken almost every other month.

This makes users believe in things like:

1. https can not be snooped on (Microsoft Security Bulletin MS12-006 - Important : Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584), 90% of popular SSL sites vulnerable to exploits, researchers find | Ars Technica , Homeland Security probes SSL flaw in RuggedCom gear securing critical infrastructure - TechSpot News)

2. WiFi is secure with WPA/WPA2 (If router is more than couple of Years old, it is not)

Quote:
Originally Posted by Samurai View Post
That means it is better to avoid logging into banking websites at work. Not sure how much inspection power websense provides the administrator.
Precisely. These solutions cost a lot, but those who can afford it can inspect/audit/archive every request. Most Indian banks transmit passwords to server (without salting it).

Newer versions of have a better implementation that does not require fake cert to be trusted by PCs. Fake certs wont work with iPhones/Androids since it cant be pushed by things like Group policy. That implementation is brilliant, but unfortunately not yet public.
NetfreakBombay is offline  
Old 24th August 2012, 11:23   #53
Senior - BHPian
 
alpha1's Avatar
 
Join Date: Apr 2007
Location: P00NA
Posts: 1,613
Thanked: 949 Times
Default Re: Office Websense blocks TBHP.

Best solution:
Get a GRPS / 3G connection which is your own.
And use it (its not that expensive these days).
alpha1 is offline  
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads
Thread Thread Starter Forum Replies Last Post
Office Firewall blocks Team-BHP - Proxying Team-BHP? shreeks Gadgets, Computers & Software 26 27th March 2017 21:05
Wanna be heard few blocks away ? blueraven316 In-Car Entertainment 17 4th July 2008 23:34
history of the chevy blocks pawan Technical Stuff 6 24th March 2007 13:42
Selling 1990 RD350, HT unsleeved blocks first oversize greenh0rn Shifting gears 3 27th February 2005 14:23


All times are GMT +5.5. The time now is 16:34.

Copyright 2000 - 2017, Team-BHP.com
Proudly powered by E2E Networks