EA Origin

Question

Today I noticed after putting the Sophos XG in place, it's no longer possible to download games from EA Origin client. 
 I created a small test rule to allow the internal IP of this particular client to connect to the internet without any ristrictions, and this quickfixes the problem. 
 
 I did do a search for this particular issue, but I only find articles related to the old UTM. 
 Anybody else experienced this issue with a Sophos XG and has the working solution at hand? 
 
 Thanks

Neil Henwood · Answer

I have the exact same issue on my setup. Was using UTM before, and have recently upgraded to XG Home. UTM had similar issues with it originally, so the fix is much the same, just implemented differently. 
 Both IPS and the default web policy seem to pick it up on my firewall, if I disable both (in the default policy in the firewall) it works 100%, but disable one or the other and no go. 
 I've fixed the web filter with an exception, still working on the IPS rules, don't really want to have to whitelist EA / Origin / Akamai servers, as they'll likely change and make me have to update them randomly. 
 
 Here's a screenshot of my exceptions in the web filter, let me know if you find a way around the IPS policies (or if anyone has a correction to my addresses below):

TijsKeijsers · Answer

I've managed to get it to work after analyzing the IPS Log Viewer page. 
 In my case the IPS system blocks it by Signature ID 34061 (SERVER-IIS Microsoft IIS Range header integer overflow attempt). After adding that as an "Allowed" into the chosen IPS policy the download started working immediately. Not saying the rest is working, will check that tomorrow.