This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Network Threat Detection is blocking Cypress automation tool

We run Cypress as our web automation tool and as of the past week or two Cypress has been crashing with the error message: Error: read ECONNRESET at TCP.onStreamRead (node:internal/stream_base_commons:211:20)

As I'm not in control of the Sophos Endpoint Agent I was able to get the IT team to give me the tamper password to test disabling the 'Network Threat Protection' once this was done Cypress was able to run the automated tests properly.

(Stack Overflow thread with others reporting issue)

Has something changed recently and is there someway that Sophos can fix this so I don't have to disable the network threat protection? If you need any info or help with this let me know.

Thanks

Adrian

This thread was automatically locked due to age.

Top Replies

Grasshopper22 over 1 year ago in reply to Sophos User930 +3

This seems like a bad solution to disable so many security restraints just to be able to run Cypress. All of my tests have started failing as of recently which has lead me to this forum. We normally develop…

Parents

0 Qoosh over 1 year ago

Hi Adrian,

Thanks for reaching out to the Sophos Community Forum.

Based on the information discussed in the thread you linked, the URL that Cypress is reaching out to is "api.cypress.io". I suggest adding this URL to the exclusions list for "Decrypt HTTPS websites using SSL/TLS".

The post you linked also mentions the traffic going out over port 443 which leads me to believe this is the culprit.

Edit: Progress/updates on this issue can be found in the following KBA. I suggest opening a case with Sophos Support so our teams are aware of the number of impacted customers, and so that additional logs can be gathered to aid our investigation into this issue.
- support.sophos.com/.../KB-000044041

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up +2 Vote Down

Cancel
0 Adrian Ling over 1 year ago in reply to Qoosh

So have waited over the weekend to ensure the policy has updated and can confirm that even adding the URLs to the exclusion list still blocks Cypress from running.

Is there anything else I can try?
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 Adrian Ling over 1 year ago in reply to Qoosh

So have waited over the weekend to ensure the policy has updated and can confirm that even adding the URLs to the exclusion list still blocks Cypress from running.

Is there anything else I can try?
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data