Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.
I have a three users who have trouble with Google Gmail based website while using Firefox. I use InterceptX. I am having issues pinning this down.
** Sophos Core Agent 2.20.13, Endpoint Advanced 10.8.11.4, Intercept X 2.0.24 (standard release channel)** Mozilla Firefox 99.0.1 64 bit (standard release channel)** Windows OS 10 Pro 64 bit patched to current (standard release channel)
Issue:01. Google Workspace Gmail stops updating / timeout message (#001) appears.02. user must close Firefox completely then start again. (if user does not start Gmail quickly enough Gmail will not start. Close Firefox completely and restart is the option.)
Testing:01. I started with a brand new windows user. I logged onto the existing Google Workspace Gmail. I did screenshots periodically to document the timeline. 02. Gmail timeout issue appeared after about 60 minutes. (prior Sophos Community noted "Trouble with google based websites using Firefox" issue so I worked that aspect. Once my Google Workspace Gmail started timing out, I worked other Google property websites.) I opened a new tap and tried Gmail (did not load). I opened a new tap and did YouTube (it worked normally). I opened another new tab and tired Google search (it worked normally).03. SpeedTest.net opened and ran without issue and Pocket.com worked without issue.04. Sophos Endpoint Agent - I signed in as Admin.05. From Sophos Endpoint Agent Admin screen ... I disabled different aspects / pieces and after each I would force Gmail to retry. I did this working through "off" but one cannot turn aspect / piece "on" after "off". Hence, I could not work through items individually. I got to half the aspects turned off and still "No Joy". (I screwed up and no screenshot of half items.) 06. After half aspects / pieces "off" and not able to re-enable, I just cancelled / off to all aspects / pieces except Deep Learning. 07. retry for Gmail and the traffic resumed working / flowing. 08. Sophos Endpoint Agent aspect(s) is/are the issue because when all but Deep Learning aspect / piece toggled "Off" and gmail resumed updates / working. However, I am unsure which aspect / piece is the issue. 09. Sophos Endpoint Agent - I signed out as Admin to re-set / re-enable all the aspects / pieces.10. Gmail running in the originally open Mozilla Firefox tab continued working normally with aspects / pieces enabled EXCEPT Application Control and Data Loss Prevention (did not re-enable when I signed out as Admin).11. Gmail timeout issue appeared after about 60 minutes. (prior Sophos Community noted "Trouble with google based websites using Firefox" issue so I worked that aspect. Once my Google Workspace Gmail started timing out, I worked other Google property websites.) I opened a new tap and tried Gmail (did not load). I opened a new tap and did YouTube (it worked normally). I opened another new tab and tired Google search (it worked normally).12. After Windows Firewall, Ransomwear Detection, Safe Browsing, Network Threat Protection, Application Control, and Data Loss Prevention aspects / pieces "off" Gmail resumed working / flowing.
(I can share the screenshots if that helps but they are just timeline value.)
Working each setting in Sophos Endpoint Agent then resetting and waiting an hour is not possible during my work day.
Does anyone have any suggestions? For working this Gmail hanging is irritating issue.
Same issue for me !
We have this exact same issue, and we have found others with this issue who have been working with Sophos for months with no resolution. Some have stated they have found a workaround by disabling "Network Threat Protection", but that is not a solution. We have verified that Sophos is definitely the cause, because uninstalling Sophos fixes the problem. Hopefully a real solution is available soon.
I found this too https://community.sophos.com/intercept-x-endpoint/early-access-program/f/feedback-and-issues/132008/trouble-with-google-based-websites-using-firefox/485536#485536
Disabling the "Network Threat Protection" on the effected computer resets the "something" because I can immediately restart the "Network Threat Protection" and the user will function for 10 to 120 minutes. (Aside, prior to the loss of email flow / app communication ... the company logo may stop displaying and/or user image may stop displaying. The Google Chat and Meetings may or may not work. I made screenshots periodically to capture these issues.)
From the Cloud console ... I tried disabling Protect network traffic item "Prevent malicious network traffic with packet inspection (IPS)". NO JOY. I tried disabling Protect network traffic item "Detect malicious connections to command and control servers". NO JOY. Then I tried disabling whole category "Protect network traffic" section. NO JOY.
During my initial testing, using a new tab in the same browser I checked other Google services (Search, YouTube, a Blog). All new tabs worked except additional Gmail.
Can you reproduce it with the Developer Tools of the browser open on the Network tab. Maybe saving all the events as a HAR file could be useful for Sophos along with the C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\sophosnetfilter.log at the same time.
Have just installed Intercept X. Now I have same issue.Was using on-premises Endpoint before, but changed because pestered by reseller about end-of-life etc. I am a sole end user, not a sysadmin.On starting Firefox, all google domains (google.com, google.co.uk, news.google.com etc) are initially accessible. But after about 5 minutes, they all fail. Links on the previously opened search pages also fail. Restarting Firefox restores access. But then it fails again after about 5 minutes.No problems in Edge or Chrome.Surprised to read above that some users have had the issue for months. Do Sophos just not care?
Another month-old thread, same issue, no resolution as far as I can tell community.sophos.com/.../network-threat-protection-policies
I must say, that it works fine for me and I've been trying to reproduce this.
The following Sophos component versions:
I'm running Windows 11:
I've tried with and without HTTPS inspection.
It all just works fine. If you use open the Firefox Developer tools on the Network tab, can you capture the issue?
I have exactly the same components as above, but Windows 10 Pro.On the most recent attempt, news.google.com failed first. google.co.uk stayed for longer, but failed after about 30 mins.
I don't know what I'm looking for in Developer Tools. I "saved all as HAR", but this website won't let me upload that file.