Web category allways identified as: none

Hi,

I think your Web Proxy is not able to connect to the WING servers. Take SSH to XG and go to option 5.Device Management> 3. Advance Shell and execute,

cd /log

cat WINGc.log (post the logs)

Then, restart web proxy from sysem services> services> Web proxy- restart.

Thanks

Hi,

the strange thing is, that a manual lookup in the firewall dashboard will work.

Hi,

Go to advance shell and restart, Garner (loggin daemon) & WINGc (categorization daemon) service.

service WINGC:restart -ds nosync

service garner:restart -ds nosync

Any help with that ?

Hi,

sorry, didn't work. Still get "none" to every website.

Sachin,

restarting the service did not help. Also there is some error I think even on the service name. Have a look at what I see from the CLI:

SFVH_SO01_SFOS 16.05.0 RC-1# service WINGc:restart -ds nosync
200 OK
SFVH_SO01_SFOS 16.05.0 RC-1# service WINGc:status -ds nosync
200 RUNNING

It should be a BUG. Waiting for the JIRA and its release date.

Thanks

Hi, every one

i have the same problem with HW XG430.

Any update about this issu all happen yesterday.

Thanks.

An update:

Today an IPS update has been released: 3.13.17, but the web filter still did not work, so I reboot the XG and now categorization is working.

Waiting for other replies.

Thanks

My device's IPS is updated to : 3.13.17 ; date -24/12/2016. Restarted the XG-135 couple of times but still the categorization problem persists. 

Please suggest further.

Thanks,

Kumar

My device's IPS is updated to : 3.13.17 ; date -24/12/2016. Restarted the XG-135 couple of times but still the categorization problem persists. 

Please suggest further.

Thanks,

Kumar

Sorry for all the trouble. There is an issue identified with the web categories. Please review this thread ASAP 

community.sophos.com/.../125754

Hi Kumar,

Can you PM me your appliance access with SSH ?

Ideally on reboot this issue should be solved

Also what are you accessing to check categorization ?

Mine was working yesterday, but is now broken. What ever that 'fix' was supposed to do was a retrograde step.

I will restart my XG.

Update

Restart of XG categorization now working.

rfcat_vk Thanks for updating your post and informing us that the restart worked. 

Thank you very much. Restarted the WINGc through the command -- "service WINGc:restart -ds nosync."

XG-135 is working fine now. The web categories issue is resolved. IPS update to version --3.13.17 has worked it seems.

Thanks,

Kumar

Happy you fixed it!

I had another XG as VM and launched a WINGc service restart before restaring itself: the IPS pattern was updated but once I launched the service restart, nothing happened.

Simply the shell did not return nothing (stack for 5 minutes). I had to press CTRL C and then a reboot from the shell helped.

At the reboot, Web Filtering was working correctly.

Merry Christmas to you all!

prateek.singh 

I wish you and all the Sophos Staff a Merry Christmas!

We hope that similar problem will not happen anymore because they provide disruption!

The other day we were replying to sachingurung that URL Filtering on XG is not working very good as UTM9 does. In fact they use different engine and this make the difference.

On XG there are a bunch of website that are not classified as expected while on UTM9 the same site are correclty classified. You are using your own URL engine (nothing wrong) but make

sure that is working and it is updating constantly and correctly otherwise all the XG admins will have trouble with their Chief because if a UTM is not correclty classifuing URL, Chief will notice

rapidly.

Here the other thread:

https://community.sophos.com/products/xg-firewall/f/web-protection/77955/bad-url-categorization#pi2132219853=2

What I have noticed, that UTM9 correcly stops all the ADS behind Youtube video from www.youtube.com while XG does not fetch all of them. Try on your own without Decrypt and Scan on both UTM9 and XG and see the difference.

We are waiting for some nice "XG gifts" under the Christmas tree soon![:D]

Have a nice Christmas!

Hi Luk,

the aim of the adblocking feature is to stop them being downloaded eg selected, so I think your comment about the XG needs to be edited.

Merry Christmas and a Happy New to all concerned security types.

HI All, 

We have encountered the issue on Friday 23rd evening , for SFOS only . We have provided a Hotfix for SFOS version as per the KB article 

https://community.sophos.com/kb/en-us/125754

Steps : Check on your XG if the Hotfix is applied. Hot Fix version is applicable for V15 and V16 as per the KB  article.

Console>   system diagnostics show version-info

Step 2: Restart the WINGc services on Shell .

service WINGc:restart -ds nosync