Limitation with Web Content Filtering on Windows 11 22H2
First Published:02/08/2023
Last Updated:02/14/2023
Description
We have identified an inconsistency in Capture Client Windows 3.7.6 and older clients on endpoints running Windows 11 version 22H2. This results in Web Content Filtering (WCF) policies that enforce blocked categories to be no longer effective on impacted endpoints.
NOTE: The ability to allow or block domains/URLs using custom lists continues to function normally.
Cause
As part of category-based Content Filtering, Capture Client sends requests to the SonicWall Content Filtering Service. The encrypted and decrypted requests and responses use Microsoft CryptoAPIs on Windows endpoints.
In Windows 11 version 22H2, Microsoft CryptoAPIs have been modified, making Capture Client unable to decrypt responses from the SonicWall Content Filtering Service.
Resolution
This issue is now fixed in Capture Client 3.7.7 for Windows and available in MySonicWall and Capture Client Management console. The said Capture Client version is released as "Self-Managed" release. For more information on Differences between "SonicWall-managed" and "Self-managed" Capture Client versions, refer to this KB article.
