Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 10318 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Pharming protection exception rule

ShunzeLee

Dear All,

We know Enable pharming protection can protect the wrong certificate of SSL sites.

But we need to redirect some FQDN to specify IP addresses for testing,

and this will be blocked by XG pharming protection.

Is there a way to set the exception FQDN on XG?

I have been tested the Web Protection Exceptions, and it doesn't work...

Thanks~

Shunze



This thread was automatically locked due to age.
Parents
  • 0

    Shunze,

    pharming protection is a global secuirty term and not related to Sophos. Pharming protection is used in order to double check DNS requests from computers, so if the computer is infected by a malware that changed the hosts file (www.gooogle.com --> 1.2.3.4, which is wrong) XG in this case will re-check the request and compare the IP to its DNS servers and the IP received from the client. If they match, traffic is allowed!

    Anyway an exception is needed because I saw another thread few months ago where people in VPN where not able to reach their internal Email server because of Pharming protection.

    Open a feature request on ideas.sophos.com and we will vote it.

    Regards

Reply
  • 0

    Shunze,

    pharming protection is a global secuirty term and not related to Sophos. Pharming protection is used in order to double check DNS requests from computers, so if the computer is infected by a malware that changed the hosts file (www.gooogle.com --> 1.2.3.4, which is wrong) XG in this case will re-check the request and compare the IP to its DNS servers and the IP received from the client. If they match, traffic is allowed!

    Anyway an exception is needed because I saw another thread few months ago where people in VPN where not able to reach their internal Email server because of Pharming protection.

    Open a feature request on ideas.sophos.com and we will vote it.

    Regards

Children