Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 5 subscribers
  • Views 2702 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Statuscode 500 - WebFiltering

Christopher Braun

Hi Guys,

 

out of nowhere our FC Department has issues connecting to a Online Banking Service (Bank of China).

SG330 Version 9.311-3

In the Web Filtering log i can see that the request is blocked and timed out.

2019:06:06-12:41:07 sopffw01 httpproxy[10394]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.240.31.100" dstip="219.141.191.180" user="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="517" request="0xdfd26800" url="ea.ebs.bankofchina.com/" referer="" error="Connection timed out" authtime="0" dnstime="2" cattime="72" avscantime="0" fullreqtime="127250720" device="0" auth="0" ua="" exceptions=""

 

I´ve tried creating exceptions for the site mentioned, exceptions for the users accessing the site, but for a weird reason it is still blocked. Different Users, Machines (Win7/8.1/10), Browsers (FFX, IE, Chrome & Opera) didn´t change the outcome.

WebFiltering in transparent mode and in the default content filter action the site is allowed.

 

Any ideas?

 

Thanks

 

 



This thread was automatically locked due to age.
Parents
  • 0

    Connection timed out

    means that the server is not responding.   These are the possibilities:

    • Your DNS lookup is returning an invalid or non-working IP address.  My DNS returns 219.141.191.180, but DNS results may be different for different geographies.
    • Your outbound packet is being dropped by a firewall.
    • The server is offline or does not want to talk to your IP address.
    • The reply packet is being dropped by a firewall.

    Since China is involved, my best guess is that the Chinese government no longer likes you.

Reply
  • 0

    Connection timed out

    means that the server is not responding.   These are the possibilities:

    • Your DNS lookup is returning an invalid or non-working IP address.  My DNS returns 219.141.191.180, but DNS results may be different for different geographies.
    • Your outbound packet is being dropped by a firewall.
    • The server is offline or does not want to talk to your IP address.
    • The reply packet is being dropped by a firewall.

    Since China is involved, my best guess is that the Chinese government no longer likes you.

Children
No Data
Unfiltered HTML