This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

unable to access specific website

CV Leow over 4 years ago

hi good afternoon all

i already at web categories to whilelist specific website

then go rule to add this web policy

but still cannot access specific website

should i need to do?

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 4 years ago

Probably means there is more hidden urls.

ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 4 years ago in reply to rfcat_vk

Adding to what rfcat_vk said, You can cross-verify by going to log-viewer, change the module to Web Protection and filter by the source IP.

Load the website again and refresh the log-viewer to get detailed information. (Make sure that Logging is enabled in the FW rule)
Cancel
Vote Up 0 Vote Down

Cancel
0 CV Leow over 4 years ago in reply to FormerMember

but i already add url to allow
Cancel
Vote Up 0 Vote Down

Cancel
0 CV Leow over 4 years ago in reply to FormerMember

2021-07-02 07:13:04Firewallmessageid="01001" log_type="Firewall" log_component="Invalid Traffic" log_subtype="Denied" status="Deny" con_duration="0" fw_rule_id="N/A" nat_rule_id="0" policy_type="0" user="" user_group="" web_policy_id="0" ips_policy_id="0" appfilter_policy_id="0" app_name="" app_risk="0" app_technology="" app_category="" vlan_id="" ether_type="IPv4 (0x0800)" bridge_name="" bridge_display_name="" in_interface="Port2.621_ppp" in_display_interface="Port2.621_ppp" out_interface="" out_display_interface="" src_mac="" dst_mac="" src_ip="220.158.201.42" src_country="MYS" dst_ip="113.211.42.19" dst_country="MYS" protocol="TCP" src_port="587" dst_port="50107" packets_sent="0" packets_received="0" bytes_sent="0" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="" src_zone="" dst_zone_type="" dst_zone="" con_direction="" con_id="" virt_con_id="" hb_status="No Heartbeat" message="Invalid packet." appresolvedby="Signature" app_is_cloud="0"
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 4 years ago in reply to CV Leow

Can you check with the 'web filter' option in the log viewer? The Log line you shared doesn't have any URLs.

Check the snapshot for a reference, apply it, reload the website, and refresh he log viewer
Cancel
Vote Up 0 Vote Down

Cancel
0 CV Leow over 4 years ago in reply to FormerMember

ok here i can see result is allow but i try to open is unable to open
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to CV Leow

the site fails security checks.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 CV Leow over 4 years ago in reply to rfcat_vk

where should i check?
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 4 years ago in reply to CV Leow

Hello there,

Just to clarify, taobao redirects to world.taobao.com, if you want to access world.taobao.com then try whitelisting world.taobao.com.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 4 years ago in reply to CV Leow

Hello there,

Just to clarify, taobao redirects to world.taobao.com, if you want to access world.taobao.com then try whitelisting world.taobao.com.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data