Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Intelligence and cURL

Dear All,

The documentation for SAV 9.x states that the Web Intelligence service filters content for the platform's main browsers: Safari, Chrome, and Firefox. It does not mention other applications or services and, indeed, most of the apps I have looked into appear to connect directly to the Internet.

While toying with cURL this morning, I noticed that it is blocked by the Web Intelligence service, just like one of the supported browsers…

Is this by design? If so, where can we find a list of applications or services that are protected by the Web Intelligence bundle? What about other command-line tools, or Mail.app, for example?

:1021179


This thread was automatically locked due to age.
Parents
  • Having used Avast for Mac and their secure connection feature, I have enough experience to say that you should implement it per process, and have the ability somehow to whitelist processes, or, like avast does, restrict this scanning to browsers, because there are a lot of apps that connect via SSL and have their own hardwired URLs and cert management, if you go the Avast way of inserting a root cert it will not work for these apps because they ignore the Keychain CAs.

    NOTE
    In the interest of full disclosure, I am a very active member of the Avast for Mac forum, and I just switched back to Sophos because it seems to me that Avast management has been pushing its developers to bundle other apps like their VPN solution and the like and they gather statistics from users (sites visited) via their browser extension for commercial benefit, at least this what is seems to me is happening.

    :1021413
Reply
  • Having used Avast for Mac and their secure connection feature, I have enough experience to say that you should implement it per process, and have the ability somehow to whitelist processes, or, like avast does, restrict this scanning to browsers, because there are a lot of apps that connect via SSL and have their own hardwired URLs and cert management, if you go the Avast way of inserting a root cert it will not work for these apps because they ignore the Keychain CAs.

    NOTE
    In the interest of full disclosure, I am a very active member of the Avast for Mac forum, and I just switched back to Sophos because it seems to me that Avast management has been pushing its developers to bundle other apps like their VPN solution and the like and they gather statistics from users (sites visited) via their browser extension for commercial benefit, at least this what is seems to me is happening.

    :1021413
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?