This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

cannot access a website

hello,
we useing the SOPHOS Firewall model of SG130, i had reach a report case from our company, we cannot access to mft2go-east.pwc.com/.../
in the case we do not turn on any web fitter, and in the same place we had two SOPHOS firewall is same model, the other one had same setting but it can enter to the website, so please give us a help.
thanks

This thread was automatically locked due to age.

Parents

0 dirkkotte over 3 years ago

do you use some type of DNS-Filter or other firewall in front of UTM?

WebFilter isn't active/configured? is IPS active - check logs.

App-Control?

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to dirkkotte

thanks for your reply, we do not had other firewall in front of UTM, and I already turn off the anti-virus software, but still cannot entry the web site
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Paco Chan over 3 years ago in reply to dirkkotte

thanks for your reply, we do not had other firewall in front of UTM, and I already turn off the anti-virus software, but still cannot entry the web site
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 3 years ago in reply to Paco Chan

Hi Paco and welcome to the UTM Community!

Please copy here the lines from the Web Filtering log when you try to access that site. If you prefer, obfuscate IPs like 84.XX.YY.121, 10.X.Y.100, 192.168.X.200 and 172.2X.Y.51. That lets us see immediately which IPs are local and which are identical.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

Sorry, I dont understand it, can you print screen to show me ?

thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

2021:11:08-10:39:03 XXXXXX httpproxy[2180]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.XX.YY.65" dstip="203.127.106.18" user="" group="" ad_domain="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="545" request="0xd6f41c00" url="">mft2go-east.pwc.com/.../ referer="" error="" authtime="0" dnstime="0" aptptime="117" cattime="83892" avscantime="5057" fullreqtime="324028" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" exceptions="" country="Singapore" category="105" reputation="trusted" categoryname="Business" sandbox="-" content-type="text/html"

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

2021:11:09-14:08:54 httpproxy[10685]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="XXX.XXX.XXX.XX" dstip="203.127.106.18" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="517" request="0x1bbd3600" url="">https://mft2go-east.pwc.com/" referer="" error="" authtime="0" dnstime="2" cattime="47" avscantime="0" fullreqtime="78007" device="0" auth="0" ua="" exceptions="" category="105" reputation="trusted" categoryname="Business"
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

So, that worked. What happens when you click on https://mft2go-east.pwc.com/17367555-00c5-47a9-aa07-50ffce9d156b/?action=reply?

Chers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

there show The webpage that can't connect to this website mft2go-east.pwc.com/.../ may be temporarily offline or has been migrated to another URL.
ERR_CONNECTION_ABORTED
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

I get through just fine. What do you see in the Web Filtering log for that URL?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

is that

2021:11:09-14:08:54 httpproxy[10685]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="XXX.XXX.XXX.XX" dstip="203.127.106.18" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="517" request="0x1bbd3600" url="">">https://mft2go-east.pwc.com/" referer="" error="" authtime="0" dnstime="2" cattime="47" avscantime="0" fullreqtime="78007" device="0" auth="0" ua="" exceptions="" category="105" reputation="trusted" categoryname="Business"
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

statuscode="200"

That's the line from the access (mft2go-east.pwc.com) that works, We need to look at the log line for mft2go-east.pwc.com/17367555-00c5-47a9-aa07-50ffce9d156b/?action=reply.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

where I can get the log line to you? thanks
Cancel
Vote Up 0 Vote Down

Cancel