Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 1106 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Denied Access - Error 500

bob charlton

Hi

 

I am new to Sophos UTM - I added a website to an exception list and the required port to the MISC section but keep getting blocked.

 

Config:

^https?://([A-Za-z0-9.-]*\.)?zipwiresw\.com\.*

 

log messages:

ame="web request blocked" action="block" method="CONNECT" srcip="10.10.101.124" dstip="195.88.119.154" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x89dd800" url="agentserver3-euproda.zipwiresw.com:45025/" referer="" error="Connection refused" authtime="0" dnstime="60728" aptptime="387" cattime="0" avscantime="0" fullreqtime="62333" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" exceptions="av,sandbox,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size,patience"
2019:10:10-16:14:36 utmproxy httpproxy[5705]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.10.101.124" dstip="195.88.119.154" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x938f500" url="agentserver3-fraproda.zipwiresw.com:45025/" referer="" error="Connection refused" authtime="0" dnstime="7610" aptptime="9746" cattime="0" avscantime="0" fullreqtime="18491" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" exceptions="av,sandbox,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size,patience"
2019:10:10-16:14:36 utmproxy httpproxy[5705]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.10.101.124" dstip="195.88.119.149" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x944ae00" url="agentserver2-fraproda.zipwiresw.com:45025/" referer="" error="Connection refused" authtime="0" dnstime="16081" aptptime="303" cattime="0" avscantime="0" fullreqtime="17434" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" exceptions="av,sandbox,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size,patience"
2019:10:10-16:14:36 utmproxy httpproxy[5705]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.10.101.124" dstip="195.88.119.149" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xdb99ee00" url="agentserver2-euproda.zipwiresw.com:45025/" referer="" error="Connection refused" authtime="0" dnstime="38618" aptptime="369" cattime="0" avscantime="0" fullreqtime="40012" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" exceptions="av,sandbox,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size,patience"
2019:10:10-16:14:36 utmproxy httpproxy[5705]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.10.101.124" dstip="195.88.119.155" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xdc60e300" url="agentserver4-fraproda.zipwiresw.com:45025/" referer="" error="Connection refused" authtime="0" dnstime="29724" aptptime="372" cattime="0" avscantime="0" fullreqtime="31165" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" exceptions="av,sandbox,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size,patience"
2019:10:10-16:14:36 utmproxy httpproxy[5705]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.10.101.124" dstip="195.88.119.148" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xdcaa9c00" url="agentserver1-euproda.zipwiresw.com:45025/" referer="" error="Connection refused" authtime="0" dnstime="56952" aptptime="367" cattime="0" avscantime="0" fullreqtime="58417" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" exceptions="av,sandbox,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension,size,patience"
2019:10:10-16:14:36 utmproxy httpproxy[5705]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.10.101.124" dstip="195.88.119.148" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xd7596e00" url="agentserver1-fraproda.zipwiresw.com:45025/" referer="" error="Connection refused" authtime="0" dnstime="457" aptptime="310" cattime="0" avscantime="0" fullreqtime="1617" device="0" 

any suggestions why I am being blocked would be greatly appreciated



This thread was automatically locked due to age.
  • 0

    This is the XG Forum, you may want to add this to the UTM Forum.  Also you can look into the logs when you try to access the site to see what is exact blocking it.  There may be another feature blocking the site besides the one you made an exception for.  Sorry can't remember exactly been using XG for a year now so I forget.