Description

External SurfControl server, used as a Web filtering server, and trying to use that as a Websense redirected feature

Symptoms

  • Already have an existing Web filtering SurfControl server, and want to use that as a redirected Web filtering server
  • All Web traffic fails
  • Running traceoptions on Web filtering and the message  ' do_url_recv_reply: sock(41) recv failed! ' is reported

Solution

On SRX platforms, external Surfcontrol for Web filtering (URL filtering) is not supported.  The only external server that is supported for Web filtering is Websense. 

In summary, the web-filtering support on JUNOS is the following:

  • Local Web filtering, using black-list or white-list, that is manually entered in the configuration
  • Web filter Reeirected (using Websense server, which listens on TCP Port 15868)
  • Web filter Integrated (using SurfControl SC-CPA protocol, and sends to destination UDP Port 9020

For more information on configuring Web filtering on SRX devices, refer to http://kb.juniper.net/KB16444 [juniper.net] .