Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Configure Group Header Size

  1. Last updated
  2. Save as PDF

Overview

The Client Proxy adds a header to web requests when redirecting them to a proxy server for filtering. This header includes metadata, such as group membership information, which is utilized by proxies like Secure Web Gateway and Secure Web Gateway for Cloud to enforce web protection policies.

Users on operating systems with multibyte character languages, like Chinese and Japanese, have reported that the total header size exceeds the maximum expected limit when the group header size is set to 8 KB. Additionally, the header size increases after encryption, which may lead to the exclusion of other important headers (such as system information headers) from the HTTP request, leading to redirection issues. Allowing the group header size to be configurable enables users to adjust it according to their specific needs. 

Supported SCP Version - 4.9.3 

NOTE: The default AD Header Group Size has remained 8K since Skyhigh Client Proxy version 4.7.0.

Steps to Configure Group Header Size

On Skyhigh SSE 
  1. On the Skyhigh SSE navigation bar, click Settings.
  2. Select Infrastructure | Client Proxy Management.

Screenshot (489)_12.png

  1. In the policy tree, select Configuration Policies.

Screenshot (490)_1.png

  1. Select a policy from the policy tree to modify from the Configuration Policies list.

Screenshot (491)_1.png

  1. Click the Active Directory tab.

Screenshot (492)_1.png

  1. Select the desired header size from the AD Group Header Size (in bytes).

Screenshot (493)_1.png

  1. Click Save and publish the updated policy.

Screenshot (493)_12.png

On On-prem EPO
  1. From the Trellix ePO menu, select Policy > Policy Catalog > Skyhigh Security Client Proxy.

step 1_1.PNG

  1. Click SCP Policy to view the policy list.

step 2_23.PNG

  1. Click Edit on the same row as the policy you want to configure.

step 2_2.PNG

  1. Under Client Proxy Settings, click Client Configuration​​​​​​.

step 5_1.PNG

  1. From the Client Configuration​​​​​​ list, scroll down to the Active Directory Groups header size setting.
  2. Select the desired AD Group Header Size (in bytes).

step 5_2.PNG

  1. Click Save.

step 5_34.PNG

On EPO SaaS 
  1. From the Trellix ePO menu, select Policy > Policy Catalog > Skyhigh Client Proxy.

step 1_1.PNG

Step 2_1.PNG

  1. Click SCP Policy to view the policy list.

Step 3_01.PNG

  1. Click Edit on the same row as the policy you want to configure.

Step 3_02.PNG

  1. Under Client Proxy Settings, click Client Configuration​​​​​​.

Step 6_01.PNG

  1. From the Client Configuration​​​​​​ list, scroll down to the Active Directory Groups header size setting.
  2. Select the desired AD Group Header Size (in bytes).

Step 6_02.PNG

  1. Click Save.

Step 6_03.PNG

  1. Back to top
  • Was this article helpful?

Recommended articles

  1. Article type
    Topic
  2. Tags
    This page has no tags.