Posted on by Jason

Disabling the URL rewriting on a SonicWall SSL-VPN bookmark

The SonicWall SSL-VPN 2000 is an impressive and feature-packed appliance. For the most part, I have no complaints (well, it would be nice if it worked on the iPhone or iPad, but this is a bigger issue…), but recently we ran into a rather annoying problem.

The SSL-VPN allows you to configure “bookmarks” that are links to your internal resources. Bookmarks can be Remote Desktop, FTP, VNC, and (among others) http and https. For intranet sites that support basic authentication, it will even push credentials.

All urls accessed through the vpn are rewritten something like: https://sslvpn/go/http://intranetsite/index.html. All URLs referenced within are rewritten as well. This works great until it doesn’t.

Say your intranet page has a link to google.com. The SSL-VPN will happily proxy all traffic through itself, rewriting the link to https://sslvpn/go/http://www.google.com.
Now say you had a link to some cloud-based application that doesn’t tolerate being proxied, and you have a problem.

As far as I can tell, SonicWall provides no option to disable rewriting for a specific bookmark. If you have purchased the Web Application Firewall addon, I believe you can setup exceptions, but I’m not even so sure about that. So… I had to try to figure it out myself.

Well after experimenting and digging, I found a workaround involving javascript redirection, obscuring strings, and overriding functions. While I typically would post my solution, I fear that SonicWall might consider it a security hole and simply patch things up without providing a viable solution. So, if you are pulling your hair out over your SSL-VPN rewriting all your external links – there is hope! Shoot me a comment / email and I’ll see if I can’t help you out.

UPDATE 10/18/2011

One of the people who requested my workaround found that in his case there was a much simpler solution: If you simply need to create a bookmark to an external website, you can just configure the bookmark on the SSL-VPN as an “external website”. My workaround is for the case where you need the SSL-VPN to proxy an internal page, but that page has a link (or redirect) to an external page that gets mangled.

Thanks!
-Jason

47 Replies to “Disabling the URL rewriting on a SonicWall SSL-VPN bookmark”

  5. Hi Jason,

    I am interested in the solution because I am having the same problem. Can you please send me an e-mail?

    Thanks a lot!

    Reply

  6. Hey Jason,

    I’m working on a site for a company and they are insisting on SonicWall. I am experiencing some weird javascript issues. I would be interested in seeing your workaround if you wouldn’t mind.

    Thanks a ton! This is driving me nuts!

    Reply

  9. Hi Jason,

    Do you know if your fix would also work with Dell SonicWALL SRA Appliance? Not sure if the same as SSL VPN 2000, but it certainly does the same crazy thing with Javascript on Bookmarks.

    I would appreciate getting a handle on what you did to see if that would work for me here.

    Thanks in advance

    Reply

    1. It might – I will email you the instructions I have. It has been long enough that I really cannot help much more – I don’t have access to the appliance any longer.

      Reply

  11. I am looking for a solution also for a customer.
    That reports the exact issue.
    Can you provide me with the workaround?

    Reply

  12. Hi Jason,

    Please let me know how to disable this rewriting thing. There is a bug if your JS is compressed with Google Closure Compiler. I have to disable this to make it work.

    Thanks.

    Reply

  13. This is a totally awsome post….thanks for posting. So what was the fix? I’m running into this problem now.

    Chad

    Reply

  14. Hi, since we haven’t updated firmware in years this is an issue for us as well. Do you still have the fix?

    Thank you

    Reply

  23. This design is wicked! You most certainly know how to keep
    a reader entertained. Between your wit and your videos, I was almost moved to start my own blog (well,
    almost…HaHa!) Excellent job. I really enjoyed what you had to say,
    and more than that, how you presented it. Too cool!

    Reply

  27. when my friend told me this website I immediately clicked and opened it and I was very happy for all the answers to my questions so far about the car was answered

    Reply

  33. you are really a excellent webmaster. The website loading speed is amazing.
    It kind of feels that you’re doing any unique trick. Also, The contents are masterpiece.
    you have performed a great job on this subject!

    Reply

  34. you are really a excellent webmaster. The website loading speed is amazing.
    It kind of feels that you’re doing any unique trick. Also, The contents are masterpiece.
    you have performed a great job on this subject!

    Reply

  42. IDCash88 Merupakan Situs Judi Online & Situs Sports Slots Live Casino IDN Poker IDN Live Terbaik dan Terpercaya,
    idcash88 merupakan Situs judi online ataupun Situs Sports Slots Live Casino IDN Poker IDN Live yang sangat Fair play,
    idcash88 http://63.250.38.109/idcash88/ menyediakan 7 Permainan antara lain yaitu adalah Sports, Slots, Live Casino, IDN Poker, IDN Live,
    Dengan Sistem keamanan yang sangat Terbaik dan Terbaru, Serta Server Respons yang Sangat Cepat,
    Permainan anda Tentunya akan Lebih Nyaman dan Menyenangkan itu semua membuat anda sangat Betah Bermain di Situs idcash88 ini.
    Maka dapat dipastikan game idcash88 situs Sports Slots Live Casino IDN Poker IDN Live sangat mudah sekali dimainkan.

    Reply

  43. Delapancash merupakan agen resmi IDN Slot Online terbaik di Indonesia. Sebagai agen judi game Slot terpercaya, kami menawarkan beberapa promosi yang tentunya sangat menguntungkan untuk anda, seperti bonus member baru 30%, bonus deposit sampai dengan 30% dan bonus menarik lainnya. Situs judi online ini sudah beroprasi sejak tahun 2012 dengan jumlah pemain yang pastinya tidak sedikit.

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *