PlayStation 4 cannot download updates: Inavlid Traffic

Have you tried turning off 'Block unrecognized SSL protocols' in Web / Protection?

I don't know if this will help but it was my first thought :-)

Thanks for your reply. I was not aware of that setting.
In fact the "Block unrecognized SSL protocols" is not enabled.

"Block invalid certificates" was enabled. I disabled it for testing, but got the same result.

This thread may help

https://community.sophos.com/products/unified-threat-management/f/web-protection-web-filtering-application-visibility-control/73482/ps4-webfilter-help---won-t-download

I added the remaining IPs. I've already added most of them, based on the other post in this forum.
I was not able to add it the exact same way as it is described in the post. Sophos says it is not a valid address. I removed the https prefix ...

Now I've the following exception list:

• ^184\.84\.65\.*
• ^50\.19\.100\.125
• ^209\.251\.*\.*
• ^([A-Za-z0-9.-]*\.)?playstation\.net/
• ^198\.107\.*\.*
• ^125\.199\.254\.51
• ^([A-Za-z0-9.-]*\.)?loris-e\.llnwd\.net/
• ^([A-Za-z0-9.-]*\.)?playstation\.de/
• ^173\.230\.216\.*
• ^([A-Za-z0-9.-]*\.)?playstation\.org/
• ^([A-Za-z0-9.-]*\.)?playstation\.com/

I also would expect that there are some logs for the web filtering, but everything green here since I've added the exceptions.

But unfortunately, the problem still exists.

I'm not sure but I suspect that the IP address entries should be listed as:

184.84.65.*

50.19.100.125

209.251.*.*

Or

184.84.65.*/*

50.19.100.125/*

209.251.*.*/*

I have tried both types and they are accepted as valid in the exceptions list but I don't have a PS4 to test the results.

I'm not sure but I suspect that the IP address entries should be listed as:

184.84.65.*

50.19.100.125

209.251.*.*

Or

184.84.65.*/*

50.19.100.125/*

209.251.*.*/*

I have tried both types and they are accepted as valid in the exceptions list but I don't have a PS4 to test the results.

I always thought, that these entries are regular expressions.
If this is true, it would be a difference if the "." is escaped "\." or not.

Do you think that the problem is related to the web filter?
I am confused, as I would have expected some log statements in the web filter log. But it seems that the firewall (policies) are blocking these packages. Am I wrong?

Hi again caldicot,

I'm not sure where the problem lies and I've only just started using the XG myself, having used Cyberoam for around 10 years. I just thought I'd suggest a couple of things that I would try but it seems they have been unsuccessful. At this point I would be doing what you are doing and ask the forum for help... Hopefully someone with a deeper knowledge of the XG system will pick this up and be able to help you from here.

Hallo Rick,

thanks for your help. Your input is of course appreciated.
I am not too familiar with all that firewall stuff, so I am glad you suggested some things I can test. :-)

As you said, hopefully someone with more experience will pick it up :-)

Best