This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Facebook blocked

Hi Community,

i run an ASG v8 in my private network, but for a longer time i got an problem using Facebook. The "normal" page show's up normaly, but all ajax requests make problems.

I noticed in my daily executive reports, that two facebook relatated domains were blocked (don't know why), but i tried to add these two URL's als exception. That worked for one of the two, but the second one still get blocked.

Any ideas?

This thread was automatically locked due to age.

0 BAlfson over 14 years ago

Please tell us your exact version of Astaro and show the log line for the facebook block.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 krivas over 14 years ago

Hello Harsesis,

You can display or capture the log and verify webfiltering is happening.
Cancel
Vote Up 0 Vote Down

Cancel
0 Harsesis over 14 years ago in reply to krivas

Hi and sorry for my late reply,

I have attached two screenshots to the post, one shows the URL that is blocked from my daily executive report, the other is the rule i added, to solve it (without success).

My version is 8.202
- Facebook.png
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 wingman over 14 years ago

Hi Harsesis

Please show the log line for the facebook block for the http proxy.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 14 years ago

Haresis, you showed showed what apears to be a section of a report with packet filter blocks, but what we need is the complete line from the full (not the Live) Firewall (packet filter) log.

Like Wingman says, if there's relevant line (dstip="69.171.227.37") in the Web Filtering (Content Filter in earlier version) log, please show that.

Also, please state the HTTP Proxy mode - Standard or Transparent, and if Transparent, are you scanning HTTPS?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Harsesis over 14 years ago

Hi,

I searched in the whole log of the last day (where i took the screenshot from) and I can't find any blocked packages, there are several entries for the destination, but all are marked as action"pass", my proxy is set to transparent mode and it does not scan https!
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 14 years ago

OK, then how about the httpproxy log line?

Also, from where did that first picture in post #4 come?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Harsesis over 14 years ago

Hi, where can I find the httpproxy log? I only have the web security log.

As I wrote the first image is an screenshot of my daily executive report (that i get per mail).
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 14 years ago

But from which section of the Executive Report does this image come come?

Yes, the Web Filtering log is the httpproxy log - you will see that when you look at it.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Harsesis over 14 years ago

Hi, the section is called "TOP10 dropped destinations"
Cancel
Vote Up 0 Vote Down

Cancel