Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 26 subscribers
  • Views 690 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cannot access sites that require login credentials, except via a VPN tunnel

RudyT

I am not a networking expert and have been using Sophos XG Home (v17) as my internet/WAN router for the past 3 months. I have not knowingly changed the configuration; however, from 2-3 weeks ago I can no longer directly access certain sites that require login credentials. The browser just times out and says the sites is not available. If I use a VPN tunnel (Express VPN) on my MacBook, then I can access these sites. Examples include 1password.com and sync.com. These sites do not appear to be blocked by any web policies.

What steps should I take to troubleshoot and resolve this issue?



This thread was automatically locked due to age.
  • 0

    Hi  

    Please create a source IP based firewall rule and do not apply any filtering or scanning on the rule and verify the status of the web site.

    Please go to Web >> General Settings >> Malware and content scanning >> Advanced settings >> Disable pharming protection to check

    Please go to Web >> General Settings >> HTTPS decryption and scanning >> Untick >> Block invalid certificates and verify

    Please check the log viewer by applying all the filtering scanning on the test rule same as an actual rule and sort Web logs for the IP, please stop other apps and web sites to narrow down the issue

  • 0 in reply to Keyur

    In addition to suggestion,

    use a drop-packet-capture from XG console or tcpdump and share the results.

    Thanks

  • 0

    Keyur,  

     

    Thank you both for the responses and apologies for the lengthy delay in getting back to you.

     

    I followed Keyur's guidance and the log shows the firewall allowing all traffic when I try to access sync.com or 1password.com/signin

     

    lferrara - can you clarify what exactly you want me to copy? If I use a drop-packet-capture (filtered by my src IP and TCP) for a few seconds and access sync.com I end up with about 8 pages of capture. I don't see an export option. Any guidance would be greatly appreciated.