passthrough.fw-notify.net

Question

Been running a UTM 9 for over a year at home, and suddenly I'm getting an error when downloading that passthrough.fw-notify.net cannot be resolved. 
 
 Anybody else getting this?

Karlos · Accepted Answer

Hi James & Everyone, 
 The issue seems to be resolved. It could take up to 30 minutes to publish record. 
 It was fixed internally and was caused due to a DNS record being removed publicly which was required for browser authentication. 
 Please clear DNS caches and retest. 
 We've tested in our environment and can now resolve passthrough.fw-notify.net 
 Thanks, Karlos

Marcos Machado · Answer

Hi JayMan! 
 JayMan said: If I was to create a zone for the dummy DNS in our internal DNS servers and point it to the IP address above would that stop this from happening in the future? 
 You can use the Certificate for End-User Pages to specify the domain where the "passthrough" access will be looked in. 
 
 In this example, the UTM will redirect the users for authentications and download progress indicators to the hostname passthrough.mydomain.tld. And it will create automatically the entries in the UTM's local DNS cache system pointing this domain to 213.144.15.19. 
 If you use the UTM as the DNS server or as the forwarder for your internal DNS server, it's done. If you use your internal DNS server forwarding requests directly to the external world, you'll have to include the entry passthrough.mydomain.tld resolving to the above IP. 
 This option (which is located at Web Protection > Filtering Options > Misc) has the additional benefit of getting rid of the certificate error page on the fw-notify.net domain. If your company already have a *.mydomain.tld, you can upload it in the UTM and save your users for errors on auth pages (specially useful when using browser auth on guests network, for example). 
 
 Regards, 
 MM

Sure Win · Answer

Sorry for the delay in getting this group the RCA. Please take a look at this statement from Sophos 
 Sophos UTM: Principal cause for 17 October 2017 14:10 UTC passthrough.fw-notify.net DNS entry removal