This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Feature Suggestion: SES Web Protection allow list

It would be nice to see, in Web Protection settings (Configure anti-virus and HIPS > Web Protection), instead of turning it simply off and on an area where we can allow certain programs through Web Protection. 

Example: Viewing a Security Camera System's web interface. Often they will require plug-ins for browsers. Recently occured and was found that Sophos' Web Protection > Download Scanner needed to be switched off to allow the Camera System's web interface to work. Would have been happy to leave it set to on but allow the one plug-in to bypass. 

:54265


This thread was automatically locked due to age.
Parents
  • Hello WhatHappened,

    I'm not sure I understand correctly - a permanent plug-in (not some, e.g. Java, component downloaded on the fly)  is required to access the SCS's web interface and additionally Download Scanning has to be turned off as the interface is unresponsive or just doing nothing but you don't get any alerts? With the plug-in installed and enabled browsing to other sites works though?

    The question is whether the LSP/WFP component doesn't handle the downloaded content correctly or protection and the plug-in somehow interfere. I don't think that the filter could determine the plug-in requesting (or sending) the data. 

    Anyway, Authorizing (Configure anti-virus and HIPS > Authorization > Websites) the SCS should exempt it from download scanning.  

    Christian

    :54301
Reply
  • Hello WhatHappened,

    I'm not sure I understand correctly - a permanent plug-in (not some, e.g. Java, component downloaded on the fly)  is required to access the SCS's web interface and additionally Download Scanning has to be turned off as the interface is unresponsive or just doing nothing but you don't get any alerts? With the plug-in installed and enabled browsing to other sites works though?

    The question is whether the LSP/WFP component doesn't handle the downloaded content correctly or protection and the plug-in somehow interfere. I don't think that the filter could determine the plug-in requesting (or sending) the data. 

    Anyway, Authorizing (Configure anti-virus and HIPS > Authorization > Websites) the SCS should exempt it from download scanning.  

    Christian

    :54301
Children
No Data