Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 1256 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Web Filter Blocking Access to Sophos

SalishSwede
I thought this was interesting. This on a UTM 9.2 new install...  

2014:03:22-16:53:43 wahine httpproxy[5698]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="10.1.2.8" dstip="54.251.33.56" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3905" request="0xe18ba000" url="mcs1-410a.broker.sophos.com" exceptions="" error="Failed to verify server certificate" authtime="0" dnstime="4" cattime="55277" avscantime="0" fullreqtime="707308" device="0" auth="0" country="Singapore" category="105,175" reputation="trusted" categoryname="Business,Software/Hardware" application="sophbrok"


This thread was automatically locked due to age.
Parents
  • 0
    The IP appears to be part of Amazon's Elastic Compute Cloud (EC2) and it does appear to be in Singapore.

    https://forums.aws.amazon.com/ann.jspa?annID=1701 lists in in the Asia Pacific group.

    As for concern: default to concerned and gather more information to adjust the level of concern, repeat until reasonably satisfied the level of concern is appropriate.  Sprinkle on repetition for verification/validation.   Certainly a way to stay busy!   (I'll be doing a quite a bit of this as it meshes nicely with something else I've been looking into.)
Reply
  • 0
    The IP appears to be part of Amazon's Elastic Compute Cloud (EC2) and it does appear to be in Singapore.

    https://forums.aws.amazon.com/ann.jspa?annID=1701 lists in in the Asia Pacific group.

    As for concern: default to concerned and gather more information to adjust the level of concern, repeat until reasonably satisfied the level of concern is appropriate.  Sprinkle on repetition for verification/validation.   Certainly a way to stay busy!   (I'll be doing a quite a bit of this as it meshes nicely with something else I've been looking into.)
Children
No Data