Allowing Access to WebSockets Through the Smoothwall Filter

Summary

Mozilla.org defines WebSockets as the following: The WebSocket API is an advanced technology that makes it possible to open a two-way interactive communication session between the user's browser and a server. With this API, you can send messages to a server and receive event-driven responses without having to poll the server for a reply. (https://developer.mozilla.org/en-US/docs/Web/API/WebSockets_API)

Problem

Some websites use the WebSocket protocol and can have issues when the traffic goes through the Web Filter.

Resolution

The following steps discuss what is needed to ensure that WebSocket traffic works through the Smoothwall as expected.

1. Create a new category which to store the WebSocket domains. Go to Guardian -> Policy Object -> Categories.
2. Enter a name for the new category. For example, Websocket.
3. Enter the Domains or Subdomains that use WebSockets into Domain/URL filtering and click Save.
4. Go to Guardian -> HTTPS Inspection -> Policy Wizard and enter the following options:
   1. Who: Everyone*
   2. What: Websocket
   3. Where: Everywhere*
   4. When: Always
   5. Action: Do no inspect
      *Change as appropriate
5. Make sure Enable Policy is selected and click Confirm.
6. Move the newly created policy above any policies for 'Decrypt and Inspect'.

NOTE: You should only add in WebSocket sources that you trust.