How to bypass Authentication by header


This article applies to:

  • SWG 9.x
  • SWG 10.x

Question:

  • Some sites or programs require you to bypass Authentication in order for it to be accessed through the SWG appliance. For Example, Google Earth’s update mechanism will not allow the program to run if it cannot contact its host site, and the host site cannot be reached when using Authentication through the SWG.

Procedure:

 

  • To bypass authentication for our Google Earth example, we will bypass using the User-Agent header that Google Earth uses to access its host site.

-Navigate to Polices -> Condition Settings -> Header Fields 
-Under Exclude by Headers click edit and enter the following information. 
Header Name: 
Condition: 
Header Value: 



- Save and Commit changes.

*note: in VSOS 9.0.0 you cannot add more than one user agent header name to the same Headers Field list. If you need to add more than one user agent you will need to create a separate list for each user agent entry. 

-Other programs and hardware have been known to need to have authentication bypassed in order to be used. Here is the program and the Header name used to allow access. 


Application

Header

Value

Expression

Google Earth

User-Agent

Regular Expression

^GoogleEarth.*

iPhone

User-Agent

Regular Expression

Apple iPhone.*

iPad

User-Agent

Regular Expression

Apple iPad.*

iTunes

User-Agent

Regular Expression

iTunes/.*

-

-

-

AppleCoreMedia/.*

Microsoft Updates

User-Agent

Equals

Windows-Update-Agent

-

-

Regular Expression

^MicrosoftBITS/.*

Adobe Flash

User-Agent

Regular Expression

^Adobe Flash Update.*

 









 


Last Modified 4/27/2015.
https://support.trustwave.com/kb/KnowledgebaseArticle14069.aspx