This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

cannot access a website

hello,
we useing the SOPHOS Firewall model of SG130, i had reach a report case from our company, we cannot access to mft2go-east.pwc.com/.../
in the case we do not turn on any web fitter, and in the same place we had two SOPHOS firewall is same model, the other one had same setting but it can enter to the website, so please give us a help.
thanks

This thread was automatically locked due to age.

Parents

0 dirkkotte over 3 years ago

do you use some type of DNS-Filter or other firewall in front of UTM?

WebFilter isn't active/configured? is IPS active - check logs.

App-Control?
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to dirkkotte

thanks for your reply, we do not had other firewall in front of UTM, and I already turn off the anti-virus software, but still cannot entry the web site
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

Hi Paco and welcome to the UTM Community!

Please copy here the lines from the Web Filtering log when you try to access that site. If you prefer, obfuscate IPs like 84.XX.YY.121, 10.X.Y.100, 192.168.X.200 and 172.2X.Y.51. That lets us see immediately which IPs are local and which are identical.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 3 years ago in reply to Paco Chan

Hi Paco and welcome to the UTM Community!

Please copy here the lines from the Web Filtering log when you try to access that site. If you prefer, obfuscate IPs like 84.XX.YY.121, 10.X.Y.100, 192.168.X.200 and 172.2X.Y.51. That lets us see immediately which IPs are local and which are identical.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Paco Chan over 3 years ago in reply to BAlfson

Sorry, I dont understand it, can you print screen to show me ?

thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

2021:11:08-10:39:03 XXXXXX httpproxy[2180]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.XX.YY.65" dstip="203.127.106.18" user="" group="" ad_domain="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="545" request="0xd6f41c00" url="">mft2go-east.pwc.com/.../ referer="" error="" authtime="0" dnstime="0" aptptime="117" cattime="83892" avscantime="5057" fullreqtime="324028" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" exceptions="" country="Singapore" category="105" reputation="trusted" categoryname="Business" sandbox="-" content-type="text/html"

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

2021:11:09-14:08:54 httpproxy[10685]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="XXX.XXX.XXX.XX" dstip="203.127.106.18" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="517" request="0x1bbd3600" url="">https://mft2go-east.pwc.com/" referer="" error="" authtime="0" dnstime="2" cattime="47" avscantime="0" fullreqtime="78007" device="0" auth="0" ua="" exceptions="" category="105" reputation="trusted" categoryname="Business"
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

So, that worked. What happens when you click on https://mft2go-east.pwc.com/17367555-00c5-47a9-aa07-50ffce9d156b/?action=reply?

Chers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

there show The webpage that can't connect to this website mft2go-east.pwc.com/.../ may be temporarily offline or has been migrated to another URL.
ERR_CONNECTION_ABORTED
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

I get through just fine. What do you see in the Web Filtering log for that URL?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

is that

2021:11:09-14:08:54 httpproxy[10685]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="XXX.XXX.XXX.XX" dstip="203.127.106.18" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="517" request="0x1bbd3600" url="">">https://mft2go-east.pwc.com/" referer="" error="" authtime="0" dnstime="2" cattime="47" avscantime="0" fullreqtime="78007" device="0" auth="0" ua="" exceptions="" category="105" reputation="trusted" categoryname="Business"
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

statuscode="200"

That's the line from the access (mft2go-east.pwc.com) that works, We need to look at the log line for mft2go-east.pwc.com/17367555-00c5-47a9-aa07-50ffce9d156b/?action=reply.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Paco Chan over 3 years ago in reply to BAlfson

where I can get the log line to you? thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Paco Chan

Mouse over my name and click on 'Send a private messsage'.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel