This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos endpoint just started blocking chromecast

Chromecast comes up and says "available for specific video sites" and blocks chrome casting to any device. Effects hundreds of workstations and chromecasts.

Disabling network threat protection solves the issue. We are trying to determine why this is though, as it just started happening last week. I dont see anything in the logs on my client though. Is there other, more verbose logs we could gather somehow? (just found sophos endpoint self help so will try that now) support.sophos.com/.../KB-000042281

i guess i should open a case about it, but i like to do forums options first.

EDIT: we traced it down to the specific sub component of the "threat protection" policy called "SSL/TLS decryption of HTTPS websites" 

Once this has been disabled, chrome casting again works fine. We have a current sophos case and have submitted logs now so hopefully they can determine how they have recently broken this. Must have been a recent update.



This thread was automatically locked due to age.
Parents
  • Does it help to create an IP exclusion for the Chromecast device out of interest?  I.e., leave "SSL/TLS decryption of HTTPS websites" enabled but under the exclusions (global or threat protection policy), add the IP to the Website Exclusion for the clients.  Just curious. Thanks,

Reply
  • Does it help to create an IP exclusion for the Chromecast device out of interest?  I.e., leave "SSL/TLS decryption of HTTPS websites" enabled but under the exclusions (global or threat protection policy), add the IP to the Website Exclusion for the clients.  Just curious. Thanks,

Children
  • yes it does work if we exclude them in the website exclusion. Its a few ip ranges over a dozen sites. its still not ideal, becuase basically if a machine on that subnet has a exploit, and loads up a web server, now that is whitelisted. not cool.

    This was a definition or other update sophos has just done. this only started last friday. So sophos needs to fix it.