Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 14 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 2450 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG blocking all HTTP after reboot, no entries in the logs to diagnose

IT Support166

XG330 (SFOS 17.5.12 MR-12) 

Since firewall reboot last night our XG is now blocking all HTTP sites and displaying the following page. We have not made any changes to any rules, and the HTTPS version of the site works fine.

More critically, there are no entries in the log viewer for these blocks to help diagnose which area of the XG is causing this block.



This thread was automatically locked due to age.
Parents
  • 0

    Check your Pattern.

     Seems like your pattern are broken.

    Check /log/u2d.log

  • 0 in reply to LuCar Toni

    Hi , Here request are getting blocked due to malware scanning failed which could be due to AV engine selected inside  "Scan engine selection" in Web ==> General Settings patterns updated failed or broken during last pattern update checks. 

    Reference snapshot:



    Please confirm patterns are up to date and if it is still giving failed result, as in work around  "Change the scan engine to another one" time being. (If only the selected AV update is failed, if both Sophos and Avira AV pattern updated failed ) then /log/u2d.log will give more information on reason as guided by

    Is appliance running in HA setup? If yes, is it A-A or A-P setup?

Reply
  • 0 in reply to LuCar Toni

    Hi , Here request are getting blocked due to malware scanning failed which could be due to AV engine selected inside  "Scan engine selection" in Web ==> General Settings patterns updated failed or broken during last pattern update checks. 

    Reference snapshot:



    Please confirm patterns are up to date and if it is still giving failed result, as in work around  "Change the scan engine to another one" time being. (If only the selected AV update is failed, if both Sophos and Avira AV pattern updated failed ) then /log/u2d.log will give more information on reason as guided by

    Is appliance running in HA setup? If yes, is it A-A or A-P setup?

Children