Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 28 subscribers
  • Views 11157 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG "blocking" Chrome download

Calyps

We recently installed an Sophos XG Firewall cluster for a client and are going through a number of pains.

At the moment I`m working on this one. Trying to download Chrome I get the below messages. 

On Internet Explorer I get this message

 

Using Chrome to download Chrome installer, I get the below message.

This is happening on multiple machines.

 

Any ideas?



This thread was automatically locked due to age.
  • 0

    Do you have QUIC block ticked?

    What do you see in log viewer when the connection fails.

    There is also the possibility that chrome does not like your CA or man-in-the-middle checking?

    Also you might want to move away from Chrome, it has become a security risk with its new spying and anti ad blocking features.

    Ian

  • 0 in reply to rfcat_vk

    Yes QUIC block is ticked.  Nothing is showing blocked in log viewer, just successful connections to the Google IP. 

    So I searched for CA and found this article - https://community.sophos.com/kb/en-us/123048

    I downloaded the certificate from the firewall and installed it on the machine and I could then get past this message. 

    Strange thing is I do not have "Decrypt & scan HTTPS" ticked. 

     

     

     

     

  • 0 in reply to Calyps

    QUIC is what google use to transport Chrome in attempt to reduce the network checking but keep security.

    Ian

  • +1

    I ran into this problem yesterday.

    When looking at the error I get, the Learn more link provided indicates that I need to make sure that 'tools.google.com' and 'dl.google.com' are not blocked.

    Create a Web filtering exception for 'tools.google.com' and 'dl.google.com'

    • Login to your firewall
    • Select 'Web' -> 'Exceptions
    • Click 'Add Exception'
    • Configure as shown below

      • URL Patterns

        ^tools\.google\.com
^dl\.google\.com
        • Skip the selected checks or actions
        Policy checks
        • Click 'Save' at the bottom left

     

    Chrome -> 'About' now installs pending updates correctly.

  • 0 in reply to M McC

    Hi  

    Thank you for sharing this, it would be helpful to the fellow community members.