This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Filter actions exception

How long before an exception to allow a url entered as a Filter action exception takes effect? In the past, it seemed as if they would take effect almost immediately, but as of late (since 7.502?) it takes hours if not days to take effect. Clearing the cache on the workstation or even rebooting doesn't seem to help. Is this working as designed? Anyone else experiencing this?

ASG 425 runinng 7.502


This thread was automatically locked due to age.
  • I haven't heard this complaint.  What if you clear the proxy cache in the Astaro?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • We are not using the HTTP Caching, is that what you are referring to? If so, obviously that shouldn't be the issue.
  • Right, I read that backwards, thinking you were getting something you wanted blocked.

    I just tried www.marijuana.com, and was blocked.  I created an exception, and was allowed through instantly.  You say you rebooted - was that the ASG or the PC?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Sorry, rebooted the PC. Even trying on multiple PCs doesn't produce any different results. Our end users aren't very happy that the site isn't unblocked till the next day.

    It used to be almost instantly, but of late, it usually takes several hours at the very least.
  • You shouldn't have to reboot anything.  What line relevant to the complaining user's blocked access do you see in the 'Content Filter (HTTP)' log after you create an exception?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Here's what I am seeing in the log. 

    The website guns.com is blocked--
    2010:03:31-11:28:30 fhpssec1-2 httpproxy[28193]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="GET" srcip="10.99.100.7" user="dschaalm" statuscode="403" cached="0" profile="REF_zIzhwDyhMk (Internal Users)" filteraction="REF_kcZyHIPDea (Staff School Hours Filter Actions)" size="2642" time="28968 ms" request="0xaa7313b8" url="www.guns.com/favicon.ico" exceptions="" error="" reason="category" category="155" reputation="unverified" categoryname="Weapons" 

    I added an exception to the appropriate filter action at 11:29, yet over 20 minutes later, the site is still blocked.

    2010:03:31-11:53:14 fhpssec1-2 httpproxy[28193]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="GET" srcip="10.99.100.7" user="dschaalm" statuscode="403" cached="0" profile="REF_zIzhwDyhMk (Internal Users)" filteraction="REF_kcZyHIPDea (Staff School Hours Filter Actions)" size="2620" time="9341 ms" request="0x8f935e8" url="www.guns.com/" exceptions="" error="" reason="category" category="155" reputation="unverified" categoryname="Weapons"
  • View your 'Configuration daemon' log for today and see when you find "object created" for an "exception" after 11:28.  This sounds strange, and I definitely would submit a support ticket via MyAstaro if you have support.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • As of 1:00 pm it is still blocked and no "object created" appears in the 'Configuration daemon' log as of yet.
  • Definitely time to get Astaro involved.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA