Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Updates Linux with squid proxy

Good day friends, 

 

We have a customer with Squid proxy, we cannot make the update or the installation with explicit proxy (Squid), we get these errors in squid: 

1551822000.477      0 10.0.3.53 TCP_DENIED_REPLY/403 3645 CONNECT dci.sophosupd.com:443 - HIER_NONE/- text/html
1551822000.479      0 10.0.3.53 TCP_DENIED_REPLY/403 3645 CONNECT dci.sophosupd.com:443 - HIER_NONE/- text/html

1551822000.493      0 10.0.3.53 TCP_DENIED_REPLY/403 3804 GET http://dci.sophosupd.com/update/b/41/b414402709a24004c1f441116f4414b1.dat - HIER_NONE/- text/html
1551822000.494      0 10.0.3.53 TCP_DENIED_REPLY/403 3804 GET http://dci.sophosupd.com/update/b/41/b414402709a24004c1f441116f4414b1.dat - HIER_NONE/- text/html

 

The clients OS system are Windows 7 and CentOS Linux 7. The squid version is 3.5. 

The customer has tried, some linux configurations, like http_acess and http_reply_access on the squid config file, but the erros persist. 

 

Maybe someone have some ideas or recommendations ? Thanks. 



This thread was automatically locked due to age.
  • Hi  

    I specifically do not have any experience with squid proxy, However, I would like to share some information here and let me know if that helps.

    First and foremost, check if the following addresses are in allow-list of your proxy.

      • *.sophos.com
      • *.sophosupd.com
      • *.sophosupd.net
      • *.sophosxl.net
      • *.globalsign.com
      • *.globalsign.net
      • *.digicert.com

    Next, I would check if the proxy authentication is set and the following KBA might help you in configuring the proxy traffic for HTTP/HTTPS.

    Linux - Proxy configuration

    Regards,

    Gowtham Mani
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.