Website blocked, but can't figure out why

edited February 22 in Firebox - Proxies

Hi
I have a little situation here.
my teammate want to acces a website from a partner to byu hardware, it's a new partner, and thei website seems to be blocked by our proxy.

But i can't figure out why
On traffic, here's what i get :

2026-02-20 10:51:13 Member2 Allow 10.0.1.16 -removed- http/tcp 60783 80 Reseau local adsl_orange_secours HTTP request (HTTP-Web-General-DHCP-00) proc_id="http-proxy" rc="525" msg_id="1AFF-0024" app_name="Google Chrome" app_cat_name="Web services" app_id="8" app_cat_id="14" proxy_act="HTTP sites interdits.1" geo_dst="FRA" op="GET" dstname="www.salmson.com" arg="/" sent_bytes="605" rcvd_bytes="0" elapsed_time="0.000289 sec(s)" sig_vers="18.408"
2026-02-20 10:51:13 Member2 Allow 10.0.1.16 -removed- http/tcp 60783 80 Reseau local adsl_orange_secours Application identified 40 64 (HTTP-Web-General-DHCP-00) proc_id="firewall" rc="100" msg_id="3000-0149" src_ip_nat="82.127.114.224" tcp_info="offset 5 AF 110353771 win 58030" app_name="Google Chrome" app_cat_name="Web services" app_id="8" app_cat_id="14" app_beh_name="Access" app_beh_id="6" action="AC-Logging" geo_dst="FRA" sig_vers="18.408"
2026-02-20 10:51:14 Member2 Allow 10.0.1.16 -removed- http/tcp 60784 80 Reseau local adsl_orange_secours HTTP request (HTTP-Web-General-DHCP-00) proc_id="http-proxy" rc="525" msg_id="1AFF-0024" app_name="Google Chrome" app_cat_name="Web services" app_id="8" app_cat_id="14" proxy_act="HTTP sites interdits.1" geo_dst="FRA" op="GET" dstname="www.salmson.com" arg="/favicon.ico" sent_bytes="515" rcvd_bytes="0" elapsed_time="0.001081 sec(s)" sig_vers="18.408"
2026-02-20 10:51:14 Member2 Allow 10.0.1.16 -removed- http/tcp 60784 80 Reseau local adsl_orange_secours Application identified 40 64 (HTTP-Web-General-DHCP-00) proc_id="firewall" rc="100" msg_id="3000-0149" src_ip_nat="82.127.114.224" tcp_info="offset 5 AF 1639057394 win 51373" app_name="Google Chrome" app_cat_name="Web services" app_id="8" app_cat_id="14" app_beh_name="Access" app_beh_id="6" action="AC-Logging" geo_dst="FRA" sig_vers="18.408"

website is -removed-

but i got a standard proxy message telling me the access was blocked.
seems to bne blocked by the rule http sites interdits.1
but i can't find what preciselly is making this site getting blocked by this rule.
It a normal hardware provider, and i don't see any words in their meta explaining this.
Is there anyther kind of log explaining preciselly why it's getting proxy blocked ?

Comments

  • Answering myself
    After going to Webblocker part, i just discoverd a Test button.
    this tells me the site is blockes due to Compromised Website.

    Haven't saw the website is still in classic http (not https) that may explain this block (they don't have any certificate)

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @Chico008
    The site you mentioned appears to be showing "business and economy" as its category now. Can you please try accessing it again?

    -James Carson
    WatchGuard Customer Support

Sign In to comment.