This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SCF - Trusted application's outgoing traffic is sometimes blocked

Hi, I'm using Sophos Client Firewall 1.5.7. Recently I checked the logs and noticed in the allowed and blocked connections the same application, in this case Gw.exe. It is listed as Trusted in the Applications tab in the SCF configuration editor and I'm perplexed as to why some connections (only out connections are listed for Gw.exe) are blocked while others are allowed. I have checked some of the entries in the log and the allowed and blocked connections appear identical in the few that I have looked at (same remote port, remote address, protocol). How do I fix it so that all of the connections for Gw.exe are allowed? Thanks.

This thread was automatically locked due to age.

Parents

0 SOL over 14 years ago

Hi pinkeyflower,
It may be that there is another version of Gw.exe triggering the event, in this case, the file will have a different checksum. As we recognise files by their checksum rather than name (by default at least) you may have to add the other checksum for Gw.exe into the authorised list too.
Please see the following article for more information on configuring the firewall settings and checksums:
http://www.sophos.com/support/knowledgebase/article/14201.html
Regards,
Stephen.
:2373
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 SOL over 14 years ago

Hi pinkeyflower,
It may be that there is another version of Gw.exe triggering the event, in this case, the file will have a different checksum. As we recognise files by their checksum rather than name (by default at least) you may have to add the other checksum for Gw.exe into the authorised list too.
Please see the following article for more information on configuring the firewall settings and checksums:
http://www.sophos.com/support/knowledgebase/article/14201.html
Regards,
Stephen.
:2373
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data