Web Policy issues - all traffic is blocked

Question

When I apply a Web Policy (regardless of the type), I can no longer access any websites. For example, using the #Default_Network_Policy firewall rule, when I apply the 'No Explicit Content' Web Policy, I can no longer access any website (examples are google.com, macrumors.com, apple.com, etc.). My web browser shows a message that says "Safari cannot open the page because it could not establish a secure connection to the server." Any ideas what's causing this?

This thread was automatically locked due to age.

Michael Dunn · Accepted Answer

Hi, you've got some problems with your system. But I'm not sure if it configuration or corruption. I suspect the latter. 
 You can see that the web proxy cannot start here: 
 
 1511396915.593238123 [ 8154/ (nil)] config-parse.c:391 cfg_read_http_ini /cfs/proxy/http/awarrenhttp.conf: Transport endpoint is not connected 1511396915.593279969 [ 8154/ (nil)] awarrenhttp.c:401 main error reading config, exiting 
 
 That error is not one that I or the developer has seen before. It suggests a problem in talking to the filesystem or configuration system. In addition you have three other processes that are crashing and coredumping. With several different things not working, there is a deeper underlying issue. 
 
 If you have support, I would call them. 
 
 If you don't, I would backup, reinstall fresh and then restore.

shred · Answer

Everything is working now. I'm not sure exactly what fixed it because I performed multiple steps but here's what I did: 
 1. Used Gnome Partition Editor (GParted) to boot up my device. It was showing that my entire SSD was unpartitioned even though Sophos XG was already installed. There's really no way to format the drive in GParted, just delete, create and resize partitions, but I created a new partition using the entire SSD. My thought here was maybe there were remnants of the pfSense (BSD based) install that the Sophos XG (Linux based) installer couldn't read/overwrite so maybe there's parts of the SSD that were not accessible. Completely theory, I'm not that computer savvy. 
 2. Re-burned the Sophos XG ISO to my USB thumb drive. I was thinking maybe something was potential corrupt the first time I created the USB drive to install Sophos XG. 
 3. Installed Sophos XG. 
 4. Ran the configuration wizard but this time I did not automatically update my firmware during the setup process. I wanted to see if it was maybe an issue with V17-MR1. 
 After I had everything up and running, I checked the Services and sure enough, Web Proxy is up and running. I created a quick rule with some Web Policies and everything is now working as expected. I also noticed Scan HTTP is now working as expected as well - I was having issues with this previously. I waited about 5-10 minutes to make sure the Web Proxy remained running and then upgraded to V17-MR1 and setup everything again. I choose not to restore from a backup file because I was concerned maybe the old configuration was corrupt. 
 It's been up and running for about 30 minutes now and everything appears to be working fine. 
 Edit: Something else I noticed was the previous two times I installed Sophos XG, I noticed the Memory usage was 80%+ (4GB RAM) and Sessions were showing 150+, which seemed a bit odd for a fairly small home network. After about 12 hours, the Memory usage dropped to about 60% and the Sessions were down to about 10-30. This time when I installed Sophos XG, the Memory usage and Sessions were showing the latter (i.e. what I would expect) immediately.