KB Article | Forcepoint Support

Notes & Warnings

For more information about managing site access, see Managing Web HTTPS site access in Content Manager Online Help.

If not using an on-premises solution but instead are Cloud, see Web enabled applications fail to initiate session or display logon prompt such as Webex and GoToMeeting in Cloud.


For additional information on specific websites and applications that are known to require bypass, please see:

Problem Description

When a user attempts to join a WebEx session, the browser does not complete the connection.

Resolution

WebEx does not support HTTPS connections through a proxy. However, there are several workarounds:  
  1. In the Forcepoint Security Manager, navigate to Settings > ScanningSSL Decryption Bypass
  2. Now expand the "Information Technology" section, check the "Web Collaboration" category, and click the arrow to move it into the right-hand pane to specify that the category will be exempt from decryption.
  3. Click OK 
  4. Click Save and Deploy
Review SSL decryption bypass in the Forcepoint Web Security Administrator Help for additional information.
 
Edit the Content Gateway's SSL incident list to tunnel the traffic
  1. In the Content Gateway Manager, go to Configure > SSL > Incidents > Add a Website.
  2. Add: *.webex.com to the incident list.
  3. Select By URL.
  4. In the Action drop-down list, select Tunnel.
  5. Click Save.
 
Review Adding websites to the Incident List in the Content Gateway Manager Help for additional information.

Configure the PAC file to send Webex traffic DIRECT instead to explicit proxy 

Add an entry for WebEx in the exceptions block of your PAC file:

if (shExpMatch(url, "*.webex.com/*")) {return "DIRECT";}

Note Forcepoint Technical Support does not support custom PAC files. For additional information, review Specifying a URL in a PAC file that should bypass the proxy

Note Hybrid customers can utilize unfiltered destinations to modify their generated PAC file. For additional information, review Adding or editing hybrid service unfiltered destinations


Configure browser Internet Options to add proxy exceptions for Webex traffic

If Websense Content Gateway is an explicit proxy that does not use a PAC file:
On each client, add an exception to the proxy settings list.

Note The following steps are for Microsoft Windows systems only. For other systems, consult your operating system and browser documentation.

On Windows systems, the following configuration works for all browsers because the WebEx client uses the values stored in Internet Options > LAN Settings > Proxy Settings.

  1. Open Windows Control Panel and select Internet Options.
  2. Select the Connection tab and click LAN Settings.
  3. In the Proxy server area, click Advanced.
  4. In the Exceptions entry field add: *.webex.com
  5. Click OK; repeat until Internet Options is closed.
  6. Close and reopen any open browsers.




keywords: WebEx; ssl decryption; incident; tunnel; pac; bypass; application access; interoperability; collaboration; conferencing

Article Feedback



Thank you for the feedback and comments.