No blocking websites

I am finding the exact same behavior as you with 9.4.  I think Web Protection for Endpoints has a lot of bugs at this version of code.  I'm not sure why we aren't hearing anything on these forums.

Guys, please insert pictures of the relevant configurations.

Cheers - Bob

Hi Bob,

I have more information on this error in this forum:

https://community.sophos.com/products/unified-threat-management/f/52/p/75973/292257#292257

I can post configuration pictures as well...but basically I have Endpoint Protection turned on and Web Control turned on.  It appears the agent on the client endpoint is receiving information for malware and virus, but if I look in the directory on the endpoint:  C:\ProgramData\Sophos\Web Control\Policy, there is nothing populating in there, so there is no protection.  

I did try to install Sophos Home (cloud based protection), and this worked just fine!  The directory C:\ProgramData\Sophos\Web Control\Policy populated with policy as I added block and allow rules to the web control part of the cloud-based version.  However, the UTM Endpoint Web Control doesn't appear to be working for some reason.  I've tried this on both Windows 7 and Windows 10 and experience the same behavior.  I've also tried 9.355 and 9.353 with the same behavior.  In all these cases, I've installed the client and UTM from scratch.  This is also a home license of the UTM.

Thanks!

I need help...

I have install the agent on win10

Device policy is work fine.

but it no blocking websites...

Vladimir, the fifth picture is of the Global Default Profile.  It doesn't offer the option to control Endpoint Web Browsing - that only exists in a Web Filtering Profile.  Go to that section and add a Profile for your Default Endpoint Group.  Does it work for you now?

Cheers - Bob

thank you very much for the answer
I realized it is already a few days ago, but it does not help me,

It takes awhile for the UTM to transmit the new configuration to the Cloud and then for the Endpoint to update itself.  Please check the sub-directory again in about an hour.  I really expect it to take about 15 minutes.

Cheers - Bob

I can not solve this problem 3 weeks, tried different versions ...
today waited the whole day, yesterday -all night ..

it's just not working for me?

...The sophos home + agent work fine...

just after the end of the agent installation, I get this message

I'm sorry, maybe you have any idea about me?

The policy fragments are brought down from the WDX service using the swi_service.exe - Sophos Web Intelligence service.

We would really need to see the logs from that.  To enable them, under the web intelligence registry key (HKLM\software\wow6432node\sophos\web intelligence), create a new DWORD called LogLevel and set it to 3.  Maybe 4 but that could be too much detail.

Then restart the swi_service service.  You should see in the swis diag log file (\windows\temp\) reference to the URLs to get the index file (you can find the same GUID as displayed in the UI of the UTM) and then the requests for the fragments referenced in the index.  This is all from memory, sorry I can't be more specific with the details but that log show the problem.

Regards,

Jak

The policy fragments are brought down from the WDX service using the swi_service.exe - Sophos Web Intelligence service.

We would really need to see the logs from that.  To enable them, under the web intelligence registry key (HKLM\software\wow6432node\sophos\web intelligence), create a new DWORD called LogLevel and set it to 3.  Maybe 4 but that could be too much detail.

Then restart the swi_service service.  You should see in the swis diag log file (\windows\temp\) reference to the URLs to get the index file (you can find the same GUID as displayed in the UI of the UTM) and then the requests for the fragments referenced in the index.  This is all from memory, sorry I can't be more specific with the details but that log show the problem.

Regards,

Jak

Thanks for the answer.
now I have another problem (maybe not just me)
I can not install the agent, the installation is infinite time...

like that for several hours...

reinstalled the windows many times...

and Sophos LiveConnect go to offline, online, offline, online...

Is this a machine on which you've installed Sophos anti-virus in the past?  If so, then look for the KnowledgeBase article that tells you how to remove that before installing.

Cheers - Bob

thanks for your reply.

No, it new windows.
every time I install a new windows
powerful processor + SSD in Raid 0, make it possible to very quickly.