Problema com Whatsapp web Sophos UTM 9

Good afternoon,

Corrects what you indicated but has not yet solved the problem ...
I'm almost asking for support from Sophos itself,
Does anyone have any ideas

Help me Please!!

The setting on the firewall as I see it is ok ...

No rejection appears in the live log, no blocked logo appears ... it only blocks at the station and nothing appears in the log

They are

Check and all ports are added and still do not work :(

Can you help me?

Can you open the remote connection to look at the server?

send me msg whatsapp? 55 16 991836751 

please!?

Hello,

did you have a look here: https://community.sophos.com/products/unified-threat-management/f/network-protection-firewall-nat-qos-ips/42170/whatsapp-calls-blocked

Hello,

the problem occurs at a user's smartphone, right?

Is the Wifi this smartphone is connected to on the same LAN segment, where your interface "INTERNAL" is connected to?

If not, then none of our rules would apply to that device.

In this post the doors that should be opened are described, and I checked here and they are all released :(

The Smartphone works normally, sending files and video calls ... the problem is on the whatsapp WEB site, where customers need to use to send documents.

Still not working

Which website for using WhatsApp!?!

https://web.whatsapp.com/

Hello,

as far as I can see, there is only a need for port 5222 and 443 open for this kind of filetransfer form a pc to that portal.

Do you have webfiltering in place?

Hello,

as far as I can see, there is only a need for port 5222 and 443 open for this kind of filetransfer form a pc to that portal.

Do you have webfiltering in place?

These doors are already released ... Check here.

The filter system works according to each sector, but there is no blocking for whatsapp WEB. and I put it in the system exceptions and it's still giving me a problem

jprusch Can't connect via remote to take a look?

Olá Vinicius and welcome to the UTM Community!

What do you learn from doing #1 in Rulz (last updated 2019-04-17)?  What about when examining the Web Filtering log (read #2 in Rulz)?

Cheers - Bob

I couldn't understand the reasoning. Rulz # 1 I can't disable this option because it is about network security.

Hello Vinicius,

that recommendation from BAlfson was meant for testing only.

PLEASE: Why don't you just test it and report your findings?

Same thing about my other questions: you did answer a third of them, the others you don't care about...

It's hard to help you like that, because we need to pose questions to clarify what you are doing.

Hello jprusch.

I understand your position, I would like to understand more what you are trying to tell me, but I am very new to the sophos system and I am doing my best to get help ... The company needs correction and I am almost opening a call on Sophos official support,

Is there another way of contact so you can help me?
Whatsapp, Teamviewer? I can connect to the stations and do tests in real time ...

REPEAT

Hello Vinicius,

that recommendation from BAlfson was meant for testing only.

PLEASE: Why don't you just test it and report your findings?

In the firewall the rule is defined with these ports

Eu coloquei um servidor no grupo de filtros que as estações usam, é notavel que a midia não envia pelo whatsapp web.

Filter group where the server is.

Here are the server log records, note that no blocking log appears, only access to the web.whatsapp ...

Do you need any more information?
I'm desperate, can someone help me?

Hello Vinicius,

1.) Firewall rules and webfilter rules are two complete separate things, although they play together.

2.) There is a "Live Log" under "Network Protection/Firewall" which shows you drops and rejects coming from the firewall ruleset.

3.) Your picture above shows an excerpt of the webfilter logs, which come from the webfilter profiles/actions.

So please, try to check the firewall log first, if there are no drops for your host.

Second, try to exclude 10.1.3.63 from the webfilter ruleset. Does it work then?

If you say "server", you mean this is a client to web.whatsapp.com?