Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 588 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

"Securly" security provided by school conflicting with web proxy.

Paul McGinnie

I have an interesting problem, which I have solved but don't understand what is going on!
I run Sophos XG Home SFOS 18.0.6 MR-6-Build655.
My daughter has a laptop from school which runs an azure based cloud office setup, with a firewall/security app called "Securly".

On XG I have egress firewall rules based on identity, or device, and use the older web proxy as this allows me to enforce Youtube and search controls.

While many things work fine for this laptop, google.com (and a few other important website) always fails saying that the response is empty.

To get round this the only thing needed is to change the egress rule specific to that machine to use the DPI engine - then Google works and "securly" seems to impose safesearch etc.

Any insight into what might be going on - as I am sure that many people have to cope with devices where they do not have complete control of the software!

Regards,

    Paul



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to rfcat_vk

    The phenomenon is that when using a LAN->WAN rule for that user, when the Web proxy is used, and that has safesearch etc configured then a browser in a session by that user gets "empty" results when going to google.

    If I turn off wenb proxy and trely on DPI in the rule the problem goes away.

    I am trying to understand what might be going on - the DPI method doesn't do anything to Google, but web proxy does - I presume that Securly conflicts in some way, with the proxy, but don't understand what or how - and I prefer not just to believe in magical incantations for setup - hence the question.

    Regards,

    Paul

  • 0 in reply to Paul McGinnie

    Hi Paul.

    from memory DPI does not scan UPD traffic. Also to use the full functionality of web proxy you would need to instal the XG CA on the device.

    Ian

    There is a document by Michael Dunn which I cannot find at the moment that might help you understand some of the issues.

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    Thanks - I would welcome the document if you can find it!

    Regards,

        Paul

  • 0 in reply to Paul McGinnie

    i was looking in the wrong place, it is at the top if the forum home page.

    ian

    decrypt and scan FAQ

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?