Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 5 subscribers
  • Views 2701 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Statuscode 500 - WebFiltering

Christopher Braun

Hi Guys,

 

out of nowhere our FC Department has issues connecting to a Online Banking Service (Bank of China).

SG330 Version 9.311-3

In the Web Filtering log i can see that the request is blocked and timed out.

2019:06:06-12:41:07 sopffw01 httpproxy[10394]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.240.31.100" dstip="219.141.191.180" user="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="517" request="0xdfd26800" url="ea.ebs.bankofchina.com/" referer="" error="Connection timed out" authtime="0" dnstime="2" cattime="72" avscantime="0" fullreqtime="127250720" device="0" auth="0" ua="" exceptions=""

 

I´ve tried creating exceptions for the site mentioned, exceptions for the users accessing the site, but for a weird reason it is still blocked. Different Users, Machines (Win7/8.1/10), Browsers (FFX, IE, Chrome & Opera) didn´t change the outcome.

WebFiltering in transparent mode and in the default content filter action the site is allowed.

 

Any ideas?

 

Thanks

 

 



This thread was automatically locked due to age.
  • 0

    Connection timed out

    means that the server is not responding.   These are the possibilities:

    • Your DNS lookup is returning an invalid or non-working IP address.  My DNS returns 219.141.191.180, but DNS results may be different for different geographies.
    • Your outbound packet is being dropped by a firewall.
    • The server is offline or does not want to talk to your IP address.
    • The reply packet is being dropped by a firewall.

    Since China is involved, my best guess is that the Chinese government no longer likes you.

  • 0

    In general, when you get a status code in the 500 range, if making an Exception for Antivirus doesn't make the site work, then you need to add the site to the Transparent Mode Skiplist.  If that doesn't fix it, see Doug's post above this one.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML