When I turn on HTTP Scanning most all web pages stop loading, used online scan tools to scan the urls and they do not have any malware.

This thread was automatically locked due to age.

Question

When I turn on HTTP Scanning most all web pages stop loading, used online scan tools to scan the urls and they do not have any malware.

lferrara · Accepted Answer

Hi All, 
 what I have seen on a couple of installations is that AV engines cannot update so as soon you enable Scan HTTP, pages stop loading or surfing is very slow with strange page format. 
 Make sure Avira and Sophos are correctly updates under System > Administration> Updates. 
 In my cases, both failed to update. So reinstall the XG using the MR2 iso from your Sophos page and HTTP scanning will work. 
 Hope this helps!

Karl-HeinzHeß · Answer

Hi ZaneDonaldson, 
 This message is normal, because you to import your Sophos certificate into your client computer to trust your firewall. 
 Your firewall is replacing during scanning the original certified certificate. 
 This is causing the error message. 
 Hope this will help.

sachingurung · Answer

Hi Zane/All, 
 Greetings and thanks for choosing Sophos. 
 If you are getting a certificate error after configuring HTTPS Decrypt and Scan option in Firewall Rule, this is because of the HSTS. 
 Please refer the links to import Sophos CA which will resolve your requirement. 
 https://www.sophos.com/en-us/support/knowledgebase/123048.aspx 
 You can also bypass HTTPS Scanning on particular category, refer this link: 
 https://www.sophos.com/en-us/support/knowledgebase/123178.aspx 
 Thanks 
 Sachin Gurung

sachingurung · Answer

Hi Josh, 
 After going through your ticket# I suggest you if you can please clear browsing history in your Web browser. Next, restart Web Proxy services by navigating through 
 System Diagnostics Services Web Proxy - Restart. This will restart the httpproxy service in XG. 
 The learn more about the packet capture facility in XG, you can refer the link here: community.sophos.com/.../123189 
 I hope restarting Web Proxy helps when http requests are blocked after applying scanning. 
 Thanks 
 Sachin Gurung