Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Blocking personal Gmail and allowing access only to corporate Gmail accounts in InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2

    • Updated:
    • 3 Jul 2017
    • Product/Version:
    • InterScan Web Security Virtual Appliance 6.5
    • Platform:
    • CentOS 6 64-bit
Summary

You host your company emails on Google and use Gmail as email service. However, you would like to block private Gmail access on your network.

Details
Public

It is possible to achieve this by using HTTP Inspection policies in IWSVA 6.5 SP2.

  1. Go to HTTP > HTTP Inspection > Filters.

    Filters

    Click image to enlarge

  2. Under the Inspection Filter section, in the Filter Name field, enter Check_GMAIL.

    Create filter name

    Click image to enlarge

  3. Tick the Advanced View radio button then copy and paste the following expression in the Patterns field:

    google_act REQ {
    HOST: .*\.google\.com
    EVENT: {
    OP: HEADER_REMOVE
    HEADER: X-GoogApps-Allowed-Domains
    }
    EVENT: {
    OP: HEADER_ADD
    HEADER: X-GoogApps-Allowed-Domains
    VALUE: your-allowed-domain1, your-allowed-domain2
    }
    }

     
    your-allowed--domain1 or your-allowed-domain2 should be your corporate domain(s).

    Advanced View

    Click image to enlarge

  4. In HTTP Inspection > Policies make sure the Check_GMAIL filter is set to Allow Scan:

    Policies

    HTTP inspection policy

    Click image to enlarge

  5. Save and Deploy the Policies to the clients.

To test if the blocking of personal Gmail access is successful:

Log in to your private gmail.

The result should look like the following:

Premium
Internal
Rating:
Category:
Configure
Solution Id:
1117700
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.