Knowledge Base

34 articles

Bypassing Office 365

By Microsoft's own admission, Office 365 can be problematic when trying to access Office 365 services through Filtering Software/Proxies. For this, they have a provided a list of URLs/IPs that need t…

Updated 2 years ago

Disable QUIC in Chrome Browser

Enabling the QUIC feature within Google's Chrome browser can prevent accurate visibility reports in the Cloud Application Control Analyze reports section. To disable it, there are two methods you can…

Updated 4 years ago

Prevent Law features for UK organisations

In the UK, the Prevent Law or Prevent Duty , is a duty that certain UK organisations (e.g. schools, government, etc) have to prevent people being drawn into terrorism. To support this, the USS Web Se…

Updated 1 year ago

Unclassified / Uncategorised Site Processing

An Unclassified or Uncategorised Site is a URL that is not yet listed in the Web Categories List and therefore does not have a category assigned for URL reputation. To configure whether Unclassified…

Updated 5 years ago

Censornet Web Filtering Policy and Approach for Education

With over ten years’ experience in the education sector the Censornet platform includes numerous predefined template policies, Rules and keyword dictionaries to simplify implementation and ensure rap…

Updated 2 years ago

List of domains to bypass apps for SSL Interception

If you intend to bypass an app from SSL Interception, you will lose all visibility of that app in the App Analyse report. For some apps, this is the only option to allow them to work. Add the followi…

Updated 2 months ago

Bypass GoToMeeting & LogMeIn

Newer Cloud USS accounts will have a number of System-level Bypasses provided by default, including Bypasses for GoToMeeting , GoToMyPC , etc. The manual configuration detailed below is only necessar…

Updated 5 years ago

Bypassing the Apple Store

By default, if you try to access the Apple Store on an iOS device going through Captive/Guest portal, you will be presented with a blank screen or a connection error. This is because the Apple store…

Updated 5 years ago

Using Web Security with Sophos

The Sophos line of security and malware prevention tools require some extra configuration in order to work alongside Cloud USS. Configuring Sophos Endpoint Security with Cloud USS. Open your Sophos C…

Updated 5 years ago

Deployment Overview

Unified Security Service is a multi-tenanted cloud (SaaS) solution that delivers a range of Internet security products from a single, unified, user interface. Deployment varies depending on the produ…

Updated 5 years ago

Check for the presence of a system proxy user

If you are experiencing unexpected behaviour with the Web Security endpoint agents or gateway, it may be that a proxy configuration exists for the Windows "system" user account. This can be left behi…

Updated 3 years ago by admin

YouTube appears to work despite Block or Warn final action applied

Applies to Chrome and Opera browsers (November 2021). It is a common requirement to restrict YouTube (and related services) using the Web Security product Filter Rules, either with a time based, user…

Updated 2 years ago by admin

ERR_CERT_HAS_EXPIRED_ Digicert certificate expiry 2023

An important Digicert Certificate has expired today (8th March 2023) causing TLS validation issues on the USS Gateway. The USS Gateway proxy uses the Ubuntu OpenSSL library, and it appears that this…

Updated 1 year ago by admin

Processes used by the USS Agent for Mac OS X

It may be beneficial to add the following processes to endpoint Anti-Malware software: Processes /Applications/UssAgent.app/Contents/MacOS/UssAgent /Applications/UssAgent.app/Contents/MacOS/UssAgentP…

Updated 1 year ago by admin

Blocking Embedded Games in Google Search

This article discusses embedded games from Google Search and techniques for controlling them. When searching for keywords like snake , minesweeper , solitaire or pacman, Google Search returns an embe…

Updated 1 year ago by admin

Enable Enhanced Unpacking Engine

This feature is reserved for the upcoming Agent 4.4 release.

Updated 5 months ago by admin

ESET issues identified

We have identified an issue with certain versions of ESET software that causes incompatibility with software that also uses the Microsoft WFP (Windows Filtering Platform) layer for intercepting netwo…

Updated 3 years ago by admin

Active Directory Login Service

This software is no longer maintained and is considered End of Life. This page has been kept available for reference only. The AD Login Service is a user identification tool for use with the USS Gate…

Updated 2 years ago by admin

MIME Categories and Types

The Web Security product (gateway and endpoint agent) can perform MIME Type scanning of downloaded files through the use of a Filter Rule and the MIME Type action. This allows an administrator to blo…

Updated 4 years ago by admin

How to submit a URL reclassification request

The Web Security product uses many techniques to ensure a URL is classified correctly however from time to time an existing URLs may require reclassifying. You can request a URL reclassification from…

Updated 3 years ago by admin

Third Party Load Balancer Guides

The following guides are available to assist configuring the USS Cloud Gateway with third party load balancer products. Please note that these documents are provided as a guide. Familiarity with the…

Updated 3 years ago by admin

What happens when my Web Security license is suspended or deleted?

The following article describes the behaviour if your Web Security license is suspended or deleted. License or Account Suspended. Gateways and Agents will continue to process web traffic however no f…

Updated 5 months ago by admin

Windows agent - force download of anti-malware database

By default the USS Agent for Windows will manage the downloading of the anti-malware database and continous updates automatically. In some cases, you may want to force the database to be cleared and…

Updated 1 year ago by admin

Change the default listening port for the USS Gateway proxy

This article explains how to change the default listening port for the USS Gateway proxy. In this example, the steps will demonstrate changing the default listening port from 8080 to 50000. From the…

Updated 3 months ago by admin

SSL/TLS Strict Mode blocked ciphers

Activating the Use strict SSL/TLS ciphers option within the Windows or Mac OS X Agent Configuration Profile will block the following ciphers as they are considered weak. This may cause unexpected beh…

Updated 5 years ago by admin

How to add a Static Route to the USS Gateway

This article will provide the steps required to add a Static Route to the USS Gateway via the command line. Ensure you have logged in to the USS Gateway command line. Elevate permissions to root by t…

Updated 3 months ago by admin

Export Agents using curl script

This article describes how to connect to the Platform API and download a list of agents as shown in the Web Security -> Deployment section. You will need: an admin user credential that has been assig…

Updated 8 months ago by admin

Installing an SSL Certificate on iOS 13

How to install the USS Cloud Gateway SSL certificate on Apple iOS 13. First, you need to download the SSL certificate to the device. The simplest way if using the captive portal is to click on the li…

Updated 4 years ago

CVE-2020-15778

This article relates to the recently announced CVE-2020-15778 vulnerability and the USS Gateway 2.0.50+ Ubuntu based virtual machine. This vulnerability is primarily a risk from inbound connections a…

Updated 9 months ago by admin

Microsoft Teams Bypass Exception list on mac OS

The following Bypass with Proxy Exception patterns should be added for Microsoft Teams: Bypass Pattern emea.pptservicescast.officeapps.live.com s-ring.msedge.net definitionupdates.microsoft.com.event…

Updated 2 months ago by admin

Custom URL parsing and overlapping patterns

The Web Security rules engine uses a category based system for controlling access to custom web sites (URL's, domains) known as patterns. The rules engine optimises the categories and their patterns…

Updated 3 years ago by admin

YouTube Safe or Restricted mode enforced by DNS

YouTube Safe mode (also known as Restricted mode) can be enforced globally by altering the DNS for specific domains. This may be required in addition to the Feature Control rule restriction. If you a…

Updated 4 years ago by admin

Safari 17 Proxy Exceptions limit

This article is superseded by the introduction of Bypass by Proxy Exception for macOS available with agent v4.3.22 and above. Please also see Microsoft Teams Bypass Exception list on mac OS. Safari v…

Updated 2 months ago by admin

Alter the default agent configuration poll time

By default the Windows Agent will poll for configuration changes every 15 minutes, offset from the time when the agent was installed. To override this, you can add a special string (REG_SZ) value cal…

Updated 4 years ago by admin