Access to externally hosted website blocked by UTM

Hi Mike,

Is the website hosted in your local network behind UTM?

If the website is not hosted behind UTM and the web protection is configured on Transparent mode; you can simply add the website in the "Skip Transparent Mode Destination Hosts" option found in Web protection> Filter option> Misc.

Thanks

Hi Sachin,

The website is hosted externally from our network therefore traffic needs to pass through the UTM to access it. We are not using transparent mode. After further investigation it appears that it may be due to DNS requests not being passed through the UTM for some reason. If I manually set my DNS server address to 8.8.8.8 I can access the website correctly. If I set my DNS server address to my Windows 2008 DC the requests are blocked.

This was all working fine before the recent Firmware update of the Sophos UTM.

I think these are all related:

https://community.sophos.com/products/unified-threat-management/f/52/t/79162

https://community.sophos.com/products/unified-threat-management/f/59/t/78674

They all seem to be HTTP/HTTPS issues accessing sites after the update.

Hi Mike,

Configure Web Protection on Transparent mode for a particular host and keep the DNS server address to the local Windows 2008 DC. Check if the website is getting resolved in such deployment. 

Awaiting response.

Hi, Mike, and welcome to the UTM Community!

If you're using the Proxy in Standard mode, then it's the Proxy that initiates the DNS request. In Transparent mode, it's the client that makes the request, so it's confusing that you say you're not in Transparent, but changing the DNS configuration on the client corrects the behavior.  How does your setup compare to DNS Best Practice?

It's not common that an upgrade "breaks" a configuration, but it does happen.  What happens if you restore the configuration backup from just before the Up2Date was applied?

Cheers - Bob