HTTPS Scan Exception for Google Drive and Google Hangout?

Question

In preparation of the next beta, I have updated my Sophos XG installation and added some more configuration. Among other things, I have enabled HTTPS scanning which required me to create some exceptions. So far, I have created some working exceptions for Skype, some financial and educational services by either way bypassing an entire category (financial and educational services) or by adding some URL pattern matches (e.g. Skype). 
 So far so good. However, I found that some services stopped working: 
 
 1. Google Drive 
 I have created a web category including googledrive.com and drive.google.com. In addition, accounts.google.com is already added as a URL pattern match allowing me to logon to GMail. However, Google Drive fails with "Unable to connect". 
 
 2. Google Hangout 
 Not sure what Google Hangout needs to work, but it works on mobile devices using a clientless bypass rule. On my desktop PC, I am using YakYak which is just giving me a "Connecting" message. 
 
 Any suggestion what I might be missing? Thank you!

lferrara · Accepted Answer

Jens, 
 from the CLI use the drop-packet-capture in order to catch with other URL needs HTTPS bypass. In my case, dropbox was not working at the beginning when I turned HTTPS D&S, then after a few hours dropbox was working as expected (maybe the APP tries multiple IP). Also I advice you to create an Application Filter where you allow the 2 application and apply it to the same firewall rule. 
 Let us know. 
 Regards

Aditya Patel · Answer

HI JensStraten, 
 I would suggest you monitor the web traffic from a single system and check which URL are needed for your app to work . Test by creating a Test rule and mention the Src host as your testing machine and keep the policy allow all. 
 After the app is operating as per your expectation you may need to add these URLS logged in LOG VIEWER and add them in Exceptions . This will help you for other application that would face a similar issue .

sachingurung · Answer

Hi Jens, 
 Apart from Luk's suggestion, you can also check in the Log Viewer > Application filter & Web Filter (use the filter for source IP) to see what is dropped for the particular IP address. 
 Thanks