This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Application control blocking well known sites unexpectedly

Hi Customers,

[Update 2] RCA has been found by development and application signature update will be pushed out as a hotfix. Please run an update manually if you do not see pattern version. Once done you will need to reload the web proxy service. More info here.

[Update 1] KBA has been released for this. Article will be updated as more information becomes available.

We are receiving a number of reports of certain well known sites (Youtube, Gmail, Yahoo etc) being blocked when accessed via a Firewall Policy with an Application Control policy enabled.

Update 24.05.2018: Updated Workaround and IPS signature version

Applies to the following Sophos product(s) and version(s)

Sophos XG running version x.14.82 of the IPS patterns

The current workaround is to explicitly add the required applications/sites as an Allow entry at the top of the selected application control policy.

Thanks,

This thread was automatically locked due to age.

Parents

0 Ronak Sheth over 7 years ago

Hi sachingurung ,

Its really creepy movement and how can Sophos do such silly mistake. This is a second time in last 4 month where Sophos started blocking legitimate traffic.

Even when nsxl was introduced with v17, Sophos had migrated from WINGc to nsxl even when cloud database was not ready.

Regards, Ronak.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Ronak Sheth over 7 years ago

Hi sachingurung ,

Its really creepy movement and how can Sophos do such silly mistake. This is a second time in last 4 month where Sophos started blocking legitimate traffic.

Even when nsxl was introduced with v17, Sophos had migrated from WINGc to nsxl even when cloud database was not ready.

Regards, Ronak.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data