Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 31 subscribers
  • Views 23117 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Google Play Store blocked by IPS

Gaustino

 Hello,

I am running XG Firewall for a few months now. However, I still have a problem which I could not solve yet.

When trying to update my apps on my Android phone, Google Play Store keeps trying to download the updates. After several minutes I receive error 495 in Play Store.

I am using a firewall rule with a IPS policy set to "lantowan_general" (default Sophos policy). When I change the IPS policy to "none" in this firewall rules, updates are downloading and installing. So I know my problem is related to IPS.

However, in my IPS log there isn't any sign of blocked traffic. So I don't know which IPS rule is causing this problem.

Any ideas on how to solve this?

Thanks in advance!



This thread was automatically locked due to age.
  • 0

    I was not able to replicate the issue you are facing on my test bench. With an IPS policy set to lantowan_general i was still able to update my apps and also install new apps using the play store. Have you tried restarting the IPS service?

    If you have already done that without any result, could you share the firewall policies implemented and also the result of the drop packet capture with your phone as the host.

    Muhammad Osama

    Sophos Certified Engineer (XG Firewall)

  • 0

    hi gaustino,

     

    did you enable logging on the firewall policy wherein the traffic is passing? kindly let us know, thanks

     

    regards,

     

  • 0 in reply to Ashen1

    Im currently having this issue as well. Since the new Updates. Have logging on firewall policy 

     

    Its definitely blocking google (172.217.25.170) on 443

    (Let me know what information you need from the logs)

    Before the Version 17 upgrade IPS did not block this traffic.

  • +1

    Do you have your network set up to block advertisements by any chance?

    I found that the default filters for ads are blocking the domain gvt1.com, after adding an exemption for that the issue was resolved.

  • 0 in reply to Weixiang Xiao

    Hi,

    Just wanted to know did this solve the issue as we were facing exactly same issue with SOPHOS XG-230, and the case is Noe with SOPHOS GES(Global Escalation team) -but no solution by far.

     

    Regards,

    Anuj

Cookie Information Banner