Error in internetbanking accessed. box.gov.br and creasp.org.br

Erro no acessado de internetbanking.caixa.gov.br e creasp.org.br

TiagoCasellato · 2024-08-07T21:20:19+00:00

Olá! O blockbit 2.4 começou a apresentar erros no acesso aos seguintes sites: internetbanking.caixa.gov.br e creasp.org.br. O site da caixa já estava nas exe...

TiagoCasellato

Hello!
Blockbit 2.4 started showing errors in access to the following sites: internetbanking. box.gov.br and creasp.org.br. The box website was already in the SSL executions in the dictionary object with the expression .*internetbanking. box.gov.br. Still, the site wouldn't open. I had to create a NAT rule with FQDN objects from the BOX website, releasing it on the HTTP port and HTTPS. It worked for a while, until I changed the I.P.S. of the BOX. The object did not update and stopped working again. I updated the object and it's back online. I want to understand why the SSL exception didn't work.

The website creasp.org.br is in a category released on Webfilter. Still, he presented the error "Can't access this site" in the browser. Again, I created an expression in the dictionary for exception SSL .*creasp.org.br. It didn't work. So, as in the first case, I had to create a NAT rule with FQDN object from the Creasp website. I want to understand why the site did not work with released category or except SSL.

Thank you.

Iago

Kaio Candido

Good afternoon! All right?

Sites with the .gov domain usually need to be accessed through specific NAT (Network Address Translation) rules, since in many cases these sites are not inspected by firewalls such as webfilters or SSL inspection.

Although direct inspection is not applied, it is essential to configure the release of the site through a NAT rule. To ensure proper access, it is important to include all IPs or FQDN required related to the site. This ensures that traffic stops and from these sites can flow without interruptions or blocks, even in the absence of direct inspection.