Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 3 subscribers
  • Views 7074 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

.asp websites blocked intermittently?

bburzycki
So we are having issues where .asp sites - Like: http://www.mysite.com/depts/genserv/purchasing/bids_rfps.asp

Are being blocked - or simply not displaying at all with no error messages?

Have others been seeing this - Is there a good work around to this issue?

It only seems to happen on some sites and not others - Should I assume the gateway is blocking some sites based on bad .asp implementation?

We actually need to view these sites and I need to allow for this so any guidance would be most helpful


This thread was automatically locked due to age.
  • 0
    It is the "bridge" u2d file to go from 9.2 to 9.3.  After install, there will be a few more individual up2dates, which should automatically download, to take you to latest, 9.307.

    That is the UTM FTP site.  Sophos doesn't put the individual u2d files on their web site (except links in blog release announcements), those go on this ftp.
  • 0 in reply to Scott_Klassen
    Seems to have worked - thanks for the help....
  • 0 in reply to Scott_Klassen
    Ok after getting the logs working.. this is what I am seeing for one specific URL:

    2015:02:09-15:16:03 f1 httpproxy[5596]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.168.16" dstip="209.233.174.64" user="" ad_domain="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="166" request="0x12877800" url="www.solanocounty.com/.../blobdload.aspreferer="www.solanocounty.com/.../html" 

    2015:02:09-15:16:03 f1 httpproxy[5596]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.168.9" dstip="108.160.169.47" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="40" request="0x132bd000" url="notify6.dropbox.com/subscribe

    2015:02:09-15:16:05 f1 httpproxy[5596]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.168.16" dstip="74.125.224.31" user="" ad_domain="" statuscode="204" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x11ccf000" url="www.gstatic.com/.../537.36" exceptions="" country="United States" category="177" reputation="trusted" categoryname="Content Server" 

    2015:02:09-15:16:06 f1 httpproxy[5596]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.168.16" dstip="209.233.174.64" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1857113" request="0x12877800" url="www.solanocounty.com/.../blobdload.aspx

    2015:02:09-15:16:07 f1 httpproxy[5596]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.168.16" dstip="209.233.174.64" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="367" request="0x12877800" url="www.solanocounty.com/.../html" 

    2015:02:09-15:16:08 f1 httpproxy[5596]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.168.104" dstip="174.129.210.177" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="73" request="0x11d7d000" url="lt.andomedia.com/lt


    I must clearly be missing how this is being blocked..
  • 0
    How about one line from the Web Filtering Live log when the site is blocked or doesn't show?  Have you tried different browsers and different client PCs?

    Cheers - Bob