Blocking personal Gmail and allowing access only to corporate Gmail accounts in InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2

It is possible to achieve this by using HTTP Inspection policies in IWSVA 6.5 SP2.

1. Go to HTTP > HTTP Inspection > Filters.

   

   Click image to enlarge

2. Under the Inspection Filter section, in the Filter Name field, enter Check_GMAIL.

   

   Click image to enlarge

3. Tick the Advanced View radio button then copy and paste the following expression in the Patterns field:

   google_act REQ {
   HOST: .*\.google\.com
   EVENT: {
   OP: HEADER_REMOVE
   HEADER: X-GoogApps-Allowed-Domains
   }
   EVENT: {
   OP: HEADER_ADD
   HEADER: X-GoogApps-Allowed-Domains
   VALUE: your-allowed-domain1, your-allowed-domain2
   }
   }

    

   your-allowed--domain1 or your-allowed-domain2 should be your corporate domain(s).

   

   Click image to enlarge

4. In HTTP Inspection > Policies make sure the Check_GMAIL filter is set to Allow Scan:

   

   

   Click image to enlarge

5. Save and Deploy the Policies to the clients.

To test if the blocking of personal Gmail access is successful:

Log in to your private gmail.

The result should look like the following: