Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 13 replies
  • Answers 3 answers
  • Subscribers 3 subscribers
  • Views 13017 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ESET file was blocked

Perry Pong

Hi,

I found UTM9 block NOD32 to download a "XXXX.dll.nup" file. 

Because of it, I added following settings.

A) At Web Filter Profiles | Filter Actions | Warned file extensions , I added "nup".

B) At Filtering Options , I added a new Exception List:

1) ^https?://([A-Za-z0-9.-]*\.)?eset\.com
2) click all skip checks

Unfortunately , the file still not download from NOD32. 

Who can give any help for me?

Thanks a lot!



This thread was automatically locked due to age.
  • 0

    Start the Web Filtering Live Log and try to download the file.  Copy the relevant line here.

    Cheers - Bob
    PS Moving this to the Web Protection forum.

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0

    Are you doing any country blocking?  I believe ESET downloads come from Slovakia.

  • 0 in reply to BAlfson

    Hi Bob,

    Following is the Live Log about it

    2018:08:25-10:09:53 XXXXXX httpproxy[30993]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.77.192.159" dstip="91.228.166.88" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xda2db000" url="91.228.166.88/.../em002_64_l1.dll.nup" referer="" error="" authtime="0" dnstime="0" cattime="109" avscantime="1523" fullreqtime="115519404" device="0" auth="0" ua="EES Update (Windows; U; 64bit; BPC 6.6.2086.1; OS: 6.1.7601 SP 1.0 NT; TDB 37939; CL 1.0.0; x64c; APP ees; ASP 0.0; FW 0.0; PX 0; PUA 0; CD 1; RA 0; HWF: 0100DD41-3E3F-4E90-9B0C-F1AA0B70BBB1; PLOC zh_tw; PCODE 111.0.0; PAR 0; ATH -1; DC 0; PLID 3AC-GUG-36A" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized" content-type="application/octet-stream"

    If I stop the web protection, this file can be downloaded.

    Thanks a lot!

    Perry

  • 0 in reply to DouglasFoster

    I haven't blocked any country. 

    Thanks

  • 0 in reply to Perry Pong

    fullreqtime="115519404"

    Some web servers have a problem with the slight delay caused by antivirus.  First, try an Exception for Antivirus for 91.228.166.88.  If that doesn't work, you'll need to skip the Proxy for it.  This is done differently when using Standard mode instead of Transparent.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Thanks Bob,

    After I switch from Transparent mode to Standard mode, ESET file can be downloaded now.

    Basically, Whats the different between Transparent mode to Standard mode? Do you have any document relate to it?

    Thanks a lot!

  • 0 in reply to Perry Pong

    Unless you modified the Proxy Settings in your browser, selecting Standard mode effectively disabled Web Filtering.  Look at the online Help for this.  The other information out there is beyond your experience with WebAdmin at present.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    IC,

    How to set this IP 91.228.166.88 to Exception or fully trust this IP? Could you please give more information for me, thanks.

  • 0 in reply to Perry Pong

    In Transparent Mode, this is done in WebAdmin.  On the 'Misc' tab of 'Web Protection >> Filtering Options', add a Host definition for 91.228.166.88 to 'Skip Transparent Mode Destination Hosts/Nets'.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi Bob,

    First of all, Thanks a lot!

    If I know a ESET IP Range is from 91.228.165.1 to 91.228.167.255, how can I trust this range in the firewall?

    Could you give any idea for me?

    Thanks!

Unfiltered HTML