Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 17 replies
  • Subscribers 1 subscriber
  • Views 7811 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Strange block of windows update

eclipse79oldacct
Hello, 
I recently bought a laptop. I was downloading windows update and I noticed an issue while I downloaded silverlight update.

This is the entry log:

2010:06:03-14:30:01 FIREWALL httpproxy[8483]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="LOCAL IP ADDRESS" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="60713 ms" request="0xaba5d158" url="au.download.windowsupdate.com/.../Hardware"

The strangeness is that "Software/Hardware" category is not blocked and I do not block EXE file. And also: windowsupdate.com, by default, is not checked by astaro (extension filter and antivirus check).

Does anyone knows the reason of the block?

Thank you
eclipse79


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Jack Daniel
    Check your IPS logs, are there any blocks shown?  Maybe 15306- we're looking at that rule.  You may want to disable that rule for now if you see it dropping traffic and you trust the systems involved.


    Well, I have a lot of these entries in IPS log. The problem is that is not easy to understand if the remote system is trusted or not. Not all the ip addresses are related to microsoft
  • 0 in reply to eclipse79oldacct
    HI Eclipse,

    could you try to restart your ASG. ( without disabling rules 15306 ). it seems also to work after a reboot.

    Regards.