Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 3620 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

itunes - web request blocked

hegl
What I have to configure to let itunes-connection passing websecurity on ASG version V8.301?

By default an exception is include as you see in the attachement.
In addition I try to activate authentication, URL Filter and SSL scanning, but without effect.

Following error message appear in logfile:
2012:03:20-11:40:27 SERVER1 httpproxy[7102]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="10.71.25.11" dstip="" user="" statuscode="403" cached="0" profile="REF_FCERpuvdQF (LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="6580" request="0x8449728" url="ax.init.itunes.apple.com./bag.xml

I see that "Default Content Filter Action" is active instead of our "Standard-Filter" for e.g. youtube.com

2012:03:20-11:49:19 SERVER1 httpproxy[7102]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.71.25.11" dstip="173.194.70.91" user="USER1" statuscode="200" cached="0" profile="REF_FCERpuvdQF (LAN)" filteraction="REF_tWxggEhuPf (Standard-Filter)" size="156935" request="0xc4dec5a8" url="www.youtube.com/.../html"


This thread was automatically locked due to age.
  • 0
    I see that "Default Content Filter Action" is active instead of our "Standard-Filter" for e.g. youtube.com

    In that access, "USER1" is identified, but, in the first line, there is no name, so the access was handled by the fallback action.

    Have you tried a reboot?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    In what mode is the proxy running? Are you using profiles?

    I have good expiriences with the following way to get problem apps to work: 

    I create an exception for a source machine that skips everything but logging. Normaly, if the app works with that exceptin, you can see all used sites in the webfilter log and you can start creating exceptions for the needed sites.
     
    Regards
    Manfred
  • 0 in reply to BAlfson
    In that access, "USER1" is identified, but, in the first line, there is no name, so the access was handled by the fallback action.

    Because itunes don´t send user-authentication (like a browser) I tried to skip auth but without success.

    Have you tried a reboot?

    Yes with the same result.
Cookie Information Banner