Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

The whole http web is suspect?

Since Saturday! none of my browsers (Safari, Firefox, Chrome, Opera, Camino, OmniWeb) have been unable to access any http website, although https websites loaded as normal.

It took a fair bit of messing about (including reinstalling Mavericks twice!) before I identified the culprit - Sophos Web Protection.

Now it may be me misunderstanding how it works or having some setting(s) wrong but if I disabled that option normal service was restored.

Under Preferences, there are two tabs under the Web Protection section: General and Allowed Websites.

The latter was completely blank with no entires in the table area.

The former, general! has two switches,

1) Block access to malicious websites using real time URL reputation checks ...…

2) Block malicious downloads from websites ...…

I had both if these set to On as I presumed that that's what I wanted to software to do. But, with those options selected, access to each and every website with an http address was blocked yet I could gain access to all https sites!

Now, my assumption is that when I visited a website Sophos would check a database to see if the site were suspect and block those, and only those, on that database.

So why, in my case, was every http site blocked? Surely the whole of the interwebbynettything hasn't suddenly gone rogue overnight?

What am I doing wrong? Are my settings wrong, could there be a conflict with something else, or is there a bug in Sophos v9?

Thanks in advance.

:1015469


This thread was automatically locked due to age.
  • Strange.  Is this a one off?  Kind of makes sense about https working (that's unscannable encrypted traffic).

    1. If you switch Web Protection back on now does the Internet connection to HTTP fail?
    2. Tried a reboot? Fully shutdown and reboot the Mac.
    3. What's the OS X version, hardware, and precise SAV version?
    :1015503

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • If I have either of the General options set to On I get the same result.  Only with both set to Off does the system work normally.

    I'm running a 27" quad-core i& iMac (late 2009) with 1TB HD and 16GB RAM running under mavericks MacOSX.9.1 Build 13B42, fully up to date as far as i cn tell, with Sophos v9.0.6, Threat Detection Engine 3.48.0 and Threat data 4.96.  Auto updates are carried out hourly and seem to be working as expected.

    I can upload the error messages from Chrome and Firefox if they help but basically they are as described in my first post.

    Yes, I have rebooted, run TechTool pro's full suite, run Disk Utility and fsck -fy at Single User level.

    If I boot the iMac into Snow Leopard via an external drive then all sites load as expected, though I guess that booting that way would bypass Sophos on the HD?

    :1015505
  • Do you have any other sort of virus/malware/URL checker (consider local, remote, web browser plugin)?

    :1015511

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Have you come up with a solution for this?  I have the same problem.  2 days ago, for no apparent reason, most but not all web sites are blocked.  The same sites are blocked in Safari and Firefox.  I am running snow leopard.  As suggested, turning off the 2 options under "web protection" that block malicious pages and downloads solved the problem but I would like to turn them back on.  I did have a power outage the other day, so maybe something got corrupted?  I uninstalled and re-installed Sophos and it did not help.

    :1017693
  • Mea culpa, mea culpa, mea maxima culpa - I did resolve it and note that inexcusably i didn't post the solution.

    Alas, off the top of my head I cannot remeber how I did it but, when I get back home later on tonight I shall have a look around and see what I did.  I have a vague feeling that it was something to do with Private Browsing, pop-up blockers or AdBlockers but, until I have a play around to check that that was the problem, I cannot be sure.  Instinct, however, tends away from those as I don't have consistent settings across all browsers as I use different browsers for different things.

    Aplogies for not informing the Community and Sophos of how I resolved it and apologies for having such a poor memory!

    :1017703
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?