This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Oudbound traffic allowed dispite a block all rule

Hi everyone,

I have rather strange behavior on my Sophos, I have created a block all rule for a specific device, yet there is still some 443 traffic allowed outbound?

The log viewer shows the following:

Rule ID 3 (which is hit on both occasions) simply blocks any destination network (WAN) and any service for this specific device, yet 123 is blocked and 443 is allowed.

Hopefully someone has some insight concerning this issue.

This thread was automatically locked due to age.

0 rfcat_vk over 3 years ago

Hi,

Looks like 443 is hitting the ssl/tls rule. Please have a look at the ssl/tls logviewer report.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisSophos over 3 years ago in reply to rfcat_vk

Hi rfcat_vk,

Just checked the 'SSL/TLS inspection' under Log viewer but nothing is found. As far as I am aware there is no SSL/TLS inspection applied to any of the rules.
Cancel
Vote Up 0 Vote Down

Cancel