• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

行为管控acg1000 禁用网站知乎

21小时前提问
  • 0关注
  • 0收藏,39浏览
粉丝:0人 关注:0人

问题描述:

自定义 知乎url   zhihu.com
发现策略执行之前用浏览器登入过的pc
能在历史记录打开。或者先用其他网络打开。切换过来也能打开。


组网及组网描述:

2 个回答
zhiliao_Mtx4fK 知了小白
粉丝:0人 关注:0人

反反复复

weibo.com/ttarticle/p/show?comment=1&id=2309405215653182701603

weibo.com/ttarticle/p/show?id=2309405215652528390203

weibo.com/ttarticle/p/show?comment=1&id=2309405215652528390203

weibo.com/ttarticle/p/show?id=2309405215652226400355

weibo.com/ttarticle/p/show?comment=1&id=2309405215652226400355

weibo.com/ttarticle/p/show?id=2309405215651936731205

weibo.com/ttarticle/p/show?comment=1&id=2309405215651936731205

weibo.com/ttarticle/p/show?id=2309405215651437609049

weibo.com/ttarticle/p/show?comment=1&id=2309405215651437609049

weibo.com/ttarticle/p/show?id=2309405215650867183704

weibo.com/ttarticle/p/show?comment=1&id=2309405215650867183704

weibo.com/ttarticle/p/show?id=2309405215650556805380

weibo.com/ttarticle/p/show?comment=1&id=2309405215650556805380

weibo.com/ttarticle/p/show?id=2309405215650267660430

weibo.com/ttarticle/p/show?comment=1&id=2309405215650267660430

weibo.com/ttarticle/p/show?id=2309405215649290387543

weibo.com/ttarticle/p/show?comment=1&id=2309405215649290387543

weibo.com/ttarticle/p/show?id=2309405215648933609590

weibo.com/ttarticle/p/show?comment=1&id=2309405215648933609590

weibo.com/ttarticle/p/show?id=2309405215647742689320

weibo.com/ttarticle/p/show?comment=1&id=2309405215647742689320

weibo.com/ttarticle/p/show?id=2309405215647386173516

weibo.com/ttarticle/p/show?comment=1&id=2309405215647386173516

weibo.com/ttarticle/p/show?id=2309405215647092310283

weibo.com/ttarticle/p/show?comment=1&id=2309405215647092310283

weibo.com/ttarticle/p/show?id=2309405215646467358880

weibo.com/ttarticle/p/show?comment=1&id=2309405215646467358880

weibo.com/ttarticle/p/show?id=2309405215645863379011

weibo.com/ttarticle/p/show?comment=1&id=2309405215645863379011

weibo.com/ttarticle/p/show?id=2309405215645532029161

weibo.com/ttarticle/p/show?comment=1&id=2309405215645532029161

weibo.com/ttarticle/p/show?id=2309405215644823453768

weibo.com/ttarticle/p/show?comment=1&id=2309405215644823453768

weibo.com/ttarticle/p/show?id=2309405215644471132215

weibo.com/ttarticle/p/show?comment=1&id=2309405215644471132215

weibo.com/ttarticle/p/show?id=2309405215644114616892

weibo.com/ttarticle/p/show?comment=1&id=2309405215644114616892

weibo.com/ttarticle/p/show?id=2309405215643292533064

weibo.com/ttarticle/p/show?comment=1&id=2309405215643292533064

weibo.com/ttarticle/p/show?id=2309405215642936017117

weibo.com/ttarticle/p/show?comment=1&id=2309405215642936017117

weibo.com/ttarticle/p/show?id=2309405215642549879046

weibo.com/ttarticle/p/show?comment=1&id=2309405215642549879046

weibo.com/ttarticle/p/show?id=2309405215642218528792

weibo.com/ttarticle/p/show?comment=1&id=2309405215642218528792

weibo.com/ttarticle/p/show?id=2309405215641853624380

weibo.com/ttarticle/p/show?comment=1&id=2309405215641853624380

weibo.com/ttarticle/p/show?id=2309405215641421873251

weibo.com/ttarticle/p/show?comment=1&id=2309405215641421873251

weibo.com/ttarticle/p/show?id=2309405215641065095224

weibo.com/ttarticle/p/show?comment=1&id=2309405215641065095224

weibo.com/ttarticle/p/show?id=2309405215640708579702

weibo.com/ttarticle/p/show?comment=1&id=2309405215640708579702

weibo.com/ttarticle/p/show?id=2309405215640348131829

weibo.com/ttarticle/p/show?comment=1&id=2309405215640348131829

weibo.com/ttarticle/p/show?id=2309405215639991615742

weibo.com/ttarticle/p/show?comment=1&id=2309405215639991615742

https://weibo.com/ttarticle/p/show?id=2309405215777300545626

https://weibo.com/ttarticle/p/show?id=2309405215777229242487

https://weibo.com/ttarticle/p/show?id=2309405215777153745421

https://weibo.com/ttarticle/p/show?id=2309405215777082179716

https://weibo.com/ttarticle/p/show?id=2309405215777011138773

https://weibo.com/ttarticle/p/show?id=2309405215776935641437

https://weibo.com/ttarticle/p/show?id=2309405215776864338133

https://weibo.com/ttarticle/p/show?id=2309405215776788578507

https://weibo.com/ttarticle/p/show?id=2309405215776717275379

https://weibo.com/ttarticle/p/show?id=2309405215776645972049

https://weibo.com/ttarticle/p/show?id=2309405215776255901707

https://weibo.com/ttarticle/p/show?id=2309405215776184860681

https://weibo.com/ttarticle/p/show?id=2309405215776109363697

https://weibo.com/ttarticle/p/show?id=2309405215776038060455

https://weibo.com/ttarticle/p/show?id=2309405215775966494936

https://weibo.com/ttarticle/p/show?id=2309405215775895453823

https://weibo.com/ttarticle/p/show?id=2309405215775807373737

https://weibo.com/ttarticle/p/show?id=2309405215775731876055

https://weibo.com/ttarticle/p/show?id=2309405215775660310610

https://weibo.com/ttarticle/p/show?id=2309405215775589269966

https://weibo.com/ttarticle/p/show?id=2309405215780270112893

https://weibo.com/ttarticle/p/show?id=2309405215780198547599

https://weibo.com/ttarticle/p/show?id=2309405215780127244371

https://weibo.com/ttarticle/p/show?id=2309405215780056203290

https://weibo.com/ttarticle/p/show?id=2309405215779980705834

https://weibo.com/ttarticle/p/show?id=2309405215779904946507

https://weibo.com/ttarticle/p/show?id=2309405215779838099576

https://weibo.com/ttarticle/p/show?id=2309405215779762602326

https://weibo.com/ttarticle/p/show?id=2309405215779435446361

https://weibo.com/ttarticle/p/show?id=2309405215779363880965

https://weibo.com/ttarticle/p/show?id=2309405215779104096585

https://weibo.com/ttarticle/p/show?id=2309405215779032530970

https://weibo.com/ttarticle/p/show?id=2309405215778961490054

https://weibo.com/ttarticle/p/show?id=2309405215778890187042

https://weibo.com/ttarticle/p/show?id=2309405215778818883918

https://weibo.com/ttarticle/p/show?id=2309405215778747318326

https://weibo.com/ttarticle/p/show?id=2309405215778676277646

https://weibo.com/ttarticle/p/show?id=2309405215778608906290

https://weibo.com/ttarticle/p/show?id=2309405215778537603246

https://weibo.com/ttarticle/p/show?id=2309405215778466562192

https://weibo.com/ttarticle/p/show?id=2309405215784476737782

https://weibo.com/ttarticle/p/show?id=2309405215784380531004

https://weibo.com/ttarticle/p/show?id=2309405215784271478808

https://weibo.com/ttarticle/p/show?id=2309405215784162165016

https://weibo.com/ttarticle/p/show?id=2309405215784086929485

https://weibo.com/ttarticle/p/show?id=2309405215783998849043

https://weibo.com/ttarticle/p/show?id=2309405215783923351701

https://weibo.com/ttarticle/p/show?id=2309405215783826620579

https://weibo.com/ttarticle/p/show?id=2309405215783747191223

https://weibo.com/ttarticle/p/show?id=2309405215782136578458

https://weibo.com/ttarticle/p/show?id=2309405215782035652689

https://weibo.com/ttarticle/p/show?id=2309405215781943377962

https://weibo.com/ttarticle/p/show?id=2309405215781532598681

https://weibo.com/ttarticle/p/show?id=2309405215781318426729

https://weibo.com/ttarticle/p/show?id=2309405215781054185506

https://weibo.com/ttarticle/p/show?id=2309405215780957978860

https://weibo.com/ttarticle/p/show?id=2309405215780848926846

https://weibo.com/ttarticle/p/show?id=2309405215780731224108

https://weibo.com/ttarticle/p/show?id=2309405215780638949540

https://weibo.com/ttarticle/p/show?id=2309405215786343202911

https://weibo.com/ttarticle/p/show?id=2309405215786267967713

https://weibo.com/ttarticle/p/show?id=2309405215786196664549

https://weibo.com/ttarticle/p/show?id=2309405215786125361253

https://weibo.com/ttarticle/p/show?id=2309405215786049864153

https://weibo.com/ttarticle/p/show?id=2309405215785948938295

https://weibo.com/ttarticle/p/show?id=2309405215785852731396

https://weibo.com/ttarticle/p/show?id=2309405215785777234272

https://weibo.com/ttarticle/p/show?id=2309405215785697280077

https://weibo.com/ttarticle/p/show?id=2309405215785613393957

https://weibo.com/ttarticle/p/show?id=2309405215785454010496

https://weibo.com/ttarticle/p/show?id=2309405215785382969660

https://weibo.com/ttarticle/p/show?id=2309405215785311404095

https://weibo.com/ttarticle/p/show?id=2309405215785240363177

https://weibo.com/ttarticle/p/show?id=2309405215785168797881

https://weibo.com/ttarticle/p/show?id=2309405215785097756939

https://weibo.com/ttarticle/p/show?id=2309405215785026191533

https://weibo.com/ttarticle/p/show?id=2309405215784954888435

https://weibo.com/ttarticle/p/show?id=2309405215784883847549

https://weibo.com/ttarticle/p/show?id=2309405215784812282167

https://weibo.com/ttarticle/p/show?id=2309405215787664671000

https://weibo.com/ttarticle/p/show?id=2309405215787555618832

https://weibo.com/ttarticle/p/show?id=2309405215787341447264

https://weibo.com/ttarticle/p/show?id=2309405215787249172575

https://weibo.com/ttarticle/p/show?id=2309405215787148771529

https://weibo.com/ttarticle/p/show?id=2309405215787069079580

https://weibo.com/ttarticle/p/show?id=2309405215786972348603

https://weibo.com/ttarticle/p/show?id=2309405215786875879752

https://weibo.com/ttarticle/p/show?id=2309405215786703913290

https://weibo.com/ttarticle/p/show?id=2309405215789946110198

https://weibo.com/ttarticle/p/show?id=2309405215789816348845

https://weibo.com/ttarticle/p/show?id=2309405215789719879908

https://weibo.com/ttarticle/p/show?id=2309405215789623410789

https://weibo.com/ttarticle/p/show?id=2309405215789547913271

https://weibo.com/ttarticle/p/show?id=2309405215789422084305

https://weibo.com/ttarticle/p/show?id=2309405215788855590975

https://weibo.com/ttarticle/p/show?id=2309405215788784550032

https://weibo.com/ttarticle/p/show?id=2309405215788708790444

https://weibo.com/ttarticle/p/show?id=2309405215788637487161

https://weibo.com/ttarticle/p/show?id=2309405215788557795369

https://weibo.com/ttarticle/p/show?id=2309405215788486754503

https://weibo.com/ttarticle/p/show?id=2309405215788410994819

https://weibo.com/ttarticle/p/show?id=2309405215788339953669

https://weibo.com/ttarticle/p/show?id=2309405215788264194211

https://weibo.com/ttarticle/p/show?id=2309405215788188696805

暂无评论

粉丝:12人 关注:0人

1. 浏览器缓存 (Browser Cache)

当您之前成功访问过知乎时,浏览器为了加速下次访问,会将网页的很多资源(如图片、CSS样式表、Javascript文件,甚至整个HTML页面)​​保存在本地硬盘上​​,这就是缓存。
  • ​“通过历史记录打开”​​:当您点击历史记录中的链接时,浏览器会优先尝试从本地缓存加载页面,而不是向网络发送请求。因为请求根本没有发出,所以自然绕过了ACG1000的管控策略。您看到的可能是​​一个过期的、静态的知乎页面快照​​。
  • ​验证方法​​:在这种情况下,您​​无法进行任何需要网络交互的操作​​,比如:
    • 刷新页面(按F5或Ctrl+F5)会失败。
    • 登录账号会失败。
    • 点击任何链接、加载新内容、点赞、评论都会失败。
    • 浏览器地址栏通常会显示一个离线状态的图标。

2. 持续的TCP连接和HSTS

这是一个更“隐蔽”的原因,能让页面看起来似乎还能正常工作。
  • ​TCP连接保持​​:如果您在策略生效前已经打开了知乎并且没有关闭浏览器标签页,您的电脑与知乎服务器之间可能还维持着一个有效的TCP连接。只要这个连接没有超时断开,数据仍然可以通过这个“通道”进行交换,ACG1000作为网络层设备,不会主动去切断一个已经建立的合法连接。
  • ​HSTS (HTTP Strict Transport Security)​​:知乎等大型网站都启用了HSTS。它告诉浏览器“在未来一段时间内,只能使用HTTPS来访问我”。即使您手动输入http://zhihu.com,浏览器也会强制转成https://zhihu.com。这个信息也被浏览器缓存了。
  • ​“切换网络后能打开”​​:您的PC可能先在其他网络(如手机热点)上成功连接了知乎,建立了安全的HTTPS连接,并缓存了HSTS信息。当您切换回公司网络时,浏览器​​依然会尝试使用HTTPS并重用之前的连接信息​​,如果TCP连接侥幸没有断开,就可能短暂地加载出内容。但一旦连接超时或有新的请求发出,ACG1000就会立刻拦截。

解决方案和建议

您的策略配置是正确的。要解决或验证这个问题,请执行以下操作:
  1. ​强制刷新并清除缓存​​:
    • 在受管控的PC上,打开浏览器,按 Ctrl + Shift + Delete(Chrome, Edge, Firefox等通用快捷键)。
    • 时间范围选择“所有时间”。
    • 勾选“缓存的图片和文件”、“COOKIE和其他网站数据”等选项。
    • 点击“清除数据”。
    • 此后,再尝试访问 zhihu.com或点击历史记录,就会发现完全无法访问了。
  2. ​重启电脑或等待​​:
    • 重启电脑会清除所有网络连接和大部分缓存状态。
    • 即使不重启,只要等待几分钟到几小时,所有旧的TCP连接都会超时断开,缓存的内容也会因无法与服务器同步而失效。
  3. ​在ACG1000上增强策略(可选)​​:
    • 为了更彻底地阻断,您可以在URL规则中不仅包含 zhihu.com,还可以加入知乎的其他相关域名,例如:
      • zhihu.com
      • www.zhihu.com
      • zhstatic.zhihu.com(这是知乎常用的静态资源域名)
    • 这样可以从多个维度进行封堵。

总结

现象根本原因结论
策略生效后,新电脑无法访问知乎ACG1000正确拦截了新的DNS查询和HTTP(S)请求。​策略配置正确且有效。​
策略生效前访问过的电脑,通过历史记录能打开旧页面浏览器从本地硬盘缓存加载了页面副本,未产生网络请求。​这不是策略漏洞,是浏览器正常行为。​
切换网络后短暂能打开旧的TCP连接未超时或浏览器HSTS等缓存信息导致。​连接超时或刷新后策略即会生效。​
您的行为管控策略是正常工作的。您所观察到的现象恰恰证明了管控是在网络层面进行的,而不是在终端层面。要彻底验证,请在一台从未访问过知乎的新PC上测试,或者在任何PC上​​清除浏览器缓存后测试​​,一定会看到预期的拦截效果。

暂无评论

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明