Web category allways identified as: none

Hi,

I think your Web Proxy is not able to connect to the WING servers. Take SSH to XG and go to option 5.Device Management> 3. Advance Shell and execute,

cd /log

cat WINGc.log (post the logs)

Then, restart web proxy from sysem services> services> Web proxy- restart.

Thanks

Hi,

the strange thing is, that a manual lookup in the firewall dashboard will work.

Hi,

Go to advance shell and restart, Garner (loggin daemon) & WINGc (categorization daemon) service.

service WINGC:restart -ds nosync

service garner:restart -ds nosync

Any help with that ?

Hi,

sorry, didn't work. Still get "none" to every website.

Sachin,

restarting the service did not help. Also there is some error I think even on the service name. Have a look at what I see from the CLI:

SFVH_SO01_SFOS 16.05.0 RC-1# service WINGc:restart -ds nosync
200 OK
SFVH_SO01_SFOS 16.05.0 RC-1# service WINGc:status -ds nosync
200 RUNNING

It should be a BUG. Waiting for the JIRA and its release date.

Thanks

Hi, every one

i have the same problem with HW XG430.

Any update about this issu all happen yesterday.

Thanks.

An update:

Today an IPS update has been released: 3.13.17, but the web filter still did not work, so I reboot the XG and now categorization is working.

Waiting for other replies.

Thanks

My device's IPS is updated to : 3.13.17 ; date -24/12/2016. Restarted the XG-135 couple of times but still the categorization problem persists. 

Please suggest further.

Thanks,

Kumar

Sorry for all the trouble. There is an issue identified with the web categories. Please review this thread ASAP 

community.sophos.com/.../125754

Hi Luk, XG web categorization is done in real time by querying sophos servers

primary.wing.sophosxl.net and peak.wing.sophosxl.net (from WINGc.conf file)

Sophos being a global company, I assume there servers are doing some kind of anycast routing based on the location of the client. My impression is that the sophosxl.net database had a hiccup and has cleared for many of us by rebooting/ running WINGc restart command but some people are still facing categorization problem. I assume that the problem will go away for everyone at some point but SOPHOS has to come and explain how this happened and WHY NOBODY is saying anything.

IF anyone has a subscription license here, please open a support ticket as the way this has been handled is really outrageous.

Follow Luk's post above and in the admin menu on your XG, open console. Log in and choose option 5 and then option 3. Type

service WINGc:restart -ds nosync and you will get a response

200 OK

Check your web filter again, if it works... great, if not try again after some time. Sorry again for not having a definitive answer but if you have a subscription, please open a support ticket.

Hi Kumar,

Can you PM me your appliance access with SSH ?

Ideally on reboot this issue should be solved

Also what are you accessing to check categorization ?

Hi Kumar,

Can you PM me your appliance access with SSH ?

Ideally on reboot this issue should be solved

Also what are you accessing to check categorization ?

Mine was working yesterday, but is now broken. What ever that 'fix' was supposed to do was a retrograde step.

I will restart my XG.

Update

Restart of XG categorization now working.

rfcat_vk Thanks for updating your post and informing us that the restart worked. 

prateek.singh 

I wish you and all the Sophos Staff a Merry Christmas!

We hope that similar problem will not happen anymore because they provide disruption!

The other day we were replying to sachingurung that URL Filtering on XG is not working very good as UTM9 does. In fact they use different engine and this make the difference.

On XG there are a bunch of website that are not classified as expected while on UTM9 the same site are correclty classified. You are using your own URL engine (nothing wrong) but make

sure that is working and it is updating constantly and correctly otherwise all the XG admins will have trouble with their Chief because if a UTM is not correclty classifuing URL, Chief will notice

rapidly.

Here the other thread:

https://community.sophos.com/products/xg-firewall/f/web-protection/77955/bad-url-categorization#pi2132219853=2

What I have noticed, that UTM9 correcly stops all the ADS behind Youtube video from www.youtube.com while XG does not fetch all of them. Try on your own without Decrypt and Scan on both UTM9 and XG and see the difference.

We are waiting for some nice "XG gifts" under the Christmas tree soon![:D]

Have a nice Christmas!

Hi Luk,

the aim of the adblocking feature is to stop them being downloaded eg selected, so I think your comment about the XG needs to be edited.

Merry Christmas and a Happy New to all concerned security types.

HI All, 

We have encountered the issue on Friday 23rd evening , for SFOS only . We have provided a Hotfix for SFOS version as per the KB article 

https://community.sophos.com/kb/en-us/125754

Steps : Check on your XG if the Hotfix is applied. Hot Fix version is applicable for V15 and V16 as per the KB  article.

Console>   system diagnostics show version-info

Step 2: Restart the WINGc services on Shell .

service WINGc:restart -ds nosync