Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ESET file was blocked

Hi,

I found UTM9 block NOD32 to download a "XXXX.dll.nup" file. 

Because of it, I added following settings.

A) At Web Filter Profiles | Filter Actions | Warned file extensions , I added "nup".

B) At Filtering Options , I added a new Exception List:

1) ^https?://([A-Za-z0-9.-]*\.)?eset\.com
2) click all skip checks

Unfortunately , the file still not download from NOD32. 

Who can give any help for me?

Thanks a lot!



This thread was automatically locked due to age.
Parents
  • Start the Web Filtering Live Log and try to download the file.  Copy the relevant line here.

    Cheers - Bob
    PS Moving this to the Web Protection forum.

  • Hi Bob,

    Following is the Live Log about it

    2018:08:25-10:09:53 XXXXXX httpproxy[30993]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.77.192.159" dstip="91.228.166.88" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xda2db000" url="91.228.166.88/.../em002_64_l1.dll.nup" referer="" error="" authtime="0" dnstime="0" cattime="109" avscantime="1523" fullreqtime="115519404" device="0" auth="0" ua="EES Update (Windows; U; 64bit; BPC 6.6.2086.1; OS: 6.1.7601 SP 1.0 NT; TDB 37939; CL 1.0.0; x64c; APP ees; ASP 0.0; FW 0.0; PX 0; PUA 0; CD 1; RA 0; HWF: 0100DD41-3E3F-4E90-9B0C-F1AA0B70BBB1; PLOC zh_tw; PCODE 111.0.0; PAR 0; ATH -1; DC 0; PLID 3AC-GUG-36A" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized" content-type="application/octet-stream"

    If I stop the web protection, this file can be downloaded.

    Thanks a lot!

    Perry

Reply
  • Hi Bob,

    Following is the Live Log about it

    2018:08:25-10:09:53 XXXXXX httpproxy[30993]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.77.192.159" dstip="91.228.166.88" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xda2db000" url="91.228.166.88/.../em002_64_l1.dll.nup" referer="" error="" authtime="0" dnstime="0" cattime="109" avscantime="1523" fullreqtime="115519404" device="0" auth="0" ua="EES Update (Windows; U; 64bit; BPC 6.6.2086.1; OS: 6.1.7601 SP 1.0 NT; TDB 37939; CL 1.0.0; x64c; APP ees; ASP 0.0; FW 0.0; PX 0; PUA 0; CD 1; RA 0; HWF: 0100DD41-3E3F-4E90-9B0C-F1AA0B70BBB1; PLOC zh_tw; PCODE 111.0.0; PAR 0; ATH -1; DC 0; PLID 3AC-GUG-36A" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized" content-type="application/octet-stream"

    If I stop the web protection, this file can be downloaded.

    Thanks a lot!

    Perry

Children