Thread Info
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 24378 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PS4 Webfilter Help - Won't Download

Ch4rg3r

Hi all,

I'm having an issue with my PS4 and the Sophos UTM web filtering.

It wont let me download anything with web filtering turned on, but if I turn off web filtering it works.

Here is the web filter logs:

2015:12:23-08:42:21 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.28.115" dstip="23.7.18.117" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="6031" request="0xe2f2a000" url="gs-sec.ww.np.dl.playstation.net/" referer="" error="" authtime="0" dnstime="60696" cattime="272" avscantime="0" fullreqtime="308378" device="0" auth="0" ua="" exceptions=""
2015:12:23-08:42:22 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.115" dstip="117.121.253.254" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="891" request="0xe3a42800" url="tmdb.np.dl.playstation.net/.../CUSA01483_00.json" referer="" error="" authtime="0" dnstime="98" cattime="256" avscantime="3562" fullreqtime="139059" device="0" auth="0" ua="PS4TitleMetadata/1.00 libhttp/3.11 (PlayStation 4)" exceptions="" content-type="text/plain"
2015:12:23-08:42:22 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.28.115" dstip="23.7.18.117" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5978" request="0xa04d800" url="gs-sec.ww.np.dl.playstation.net/" referer="" error="" authtime="0" dnstime="4" cattime="250" avscantime="0" fullreqtime="233102" device="0" auth="0" ua="" exceptions=""
2015:12:23-08:42:22 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.115" dstip="117.121.253.254" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="891" request="0xe2e9b800" url="tmdb.np.dl.playstation.net/.../CUSA01483_00.json" referer="" error="" authtime="0" dnstime="121" cattime="314" avscantime="3503" fullreqtime="137392" device="0" auth="0" ua="PS4TitleMetadata/1.00 libhttp/3.11 (PlayStation 4)" exceptions="" content-type="text/plain"
2015:12:23-08:42:23 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.115" dstip="117.121.253.254" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="440" request="0xe3998800" url="gs2.ww.prod.dl.playstation.net/.../EP9000-CUSA01483_00-VALKENTGUNSUP001-A0203-V0100.json" referer="" error="" authtime="0" dnstime="113" cattime="417" avscantime="3521" fullreqtime="117118" device="0" auth="0" ua="libhttp/3.11 (PlayStation 4)" exceptions="" content-type="text/plain"
2015:12:23-08:42:23 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.115" dstip="117.121.253.254" user="" ad_domain="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe2ebf800" url="gs2.ww.prod.dl.playstation.net/.../EP9000-CUSA01483_00-VALKENTGUNSUP001-A0203-V0100.pkg referer="" error="" authtime="0" dnstime="111" cattime="404" avscantime="0" fullreqtime="122049" device="0" auth="0" ua="libhttp/3.11 (PlayStation 4)" exceptions=""
2015:12:23-08:42:23 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.115" dstip="117.121.253.153" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="102056" request="0xe399a800" url="ic.0e02bf8c.043eef.gs2.sonycoment.loris-e.llnwd.net/.../EP9000-CUSA01483_00-VALKENTGUNSUP001-A0203-V0100.pkg referer="" error="" authtime="0" dnstime="111" cattime="402" avscantime="0" fullreqtime="434564" device="0" auth="0" ua="libhttp/3.11 (PlayStation 4)" exceptions="" category="178" reputation="neutral" categoryname="Internet Services" content-type="application/octet-stream"
2015:12:23-08:42:23 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.115" dstip="117.121.253.254" user="" ad_domain="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe399b800" url="gs2.ww.prod.dl.playstation.net/.../EP9000-CUSA01483_00-VALKENTGUNSUP001-A0203-V0100.pkg referer="" error="" authtime="0" dnstime="110" cattime="403" avscantime="0" fullreqtime="119059" device="0" auth="0" ua="libhttp/3.11 (PlayStation 4)" exceptions=""
2015:12:23-08:42:30 sophosfw httpproxy[13992]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.115" dstip="117.121.253.153" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="7918584" request="0xe2ebe800" url="ic.0e02bf8c.043eef.gs2.sonycoment.loris-e.llnwd.net/.../EP9000-CUSA01483_00-VALKENTGUNSUP001-A0203-V0100.pkg referer="" error="" authtime="0" dnstime="109" cattime="404" avscantime="0" fullreqtime="6855488" device="0" auth="0" ua="libhttp/3.11 (PlayStation 4)" exceptions="" category="178" reputation="neutral" categoryname="Internet Services" content-type="application/octet-stream"

I tried adding playstation.net, playstation.com and llnwd.net to the allowed sites but it doesn't work. I'm not a web filtering guru so if any can help that would be appreciated.

Cheers



This thread was automatically locked due to age.
  • Hi,

    in which mode is your Web Protection running ?(Standard / Transparent ...)
    I had the same problem, i am using the web protection in transparent mode. I defined an exception for the ps4 host object (Filtering Options / Misc / Transparent Mode Skiplist).

    Since i made this, i haven´t had any problems yet.


    cheers
    Tom

  • Thanks Tom.

    Yes it's in transparent mode. I was trying to avoid excluding entire devices in case my kids got on them.

    I'm now having the same problem with a new Samsung TV and the Netflix app on the TV.

    2015:12:30-17:22:00 sophosfw httpproxy[31148]: Integrated HTTP-Proxy (c) 2007-2015 Sophos Ltd, Release 258.g3645241.rb1
    2015:12:30-17:22:03 sophosfw httpproxy[31148]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.28.181" dstip="54.72.224.192" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2978" request="0xe507000" url="lcprd1.samsungcloudsolution.net/" referer="" error="" authtime="0" dnstime="59729" cattime="232" avscantime="0" fullreqtime="1838236" device="0" auth="0" ua="" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized"
    2015:12:30-17:22:05 sophosfw httpproxy[31148]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.28.181" dstip="203.33.255.37" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1106687" request="0x1168a800" url="203.33.255.37/ referer="" error="" authtime="0" dnstime="125" cattime="1563" avscantime="0" fullreqtime="2589828" device="0" auth="0" ua="" exceptions="" category="9998" reputation="unverified" categoryname="Uncategorized" content-type="application/octet-stream"
    2015:12:30-17:22:07 sophosfw httpproxy[31148]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.28.181" dstip="54.214.29.183" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2280" request="0xe3e2f000" url="api-global.netflix.com/.../resume" referer="secure.netflix.com/.../darwinpointer.js error="" authtime="0" dnstime="69321" cattime="186" avscantime="13298" fullreqtime="2268449" device="0" auth="0" ua="Gibbon/2014.1.5/2014.1.5: Netflix/2014.1.5 (DEVTYPE=SSTV-HKM2-; CERTVER=2)" exceptions="" reputation="trusted" category="112" reputation="trusted" categoryname="Entertainment" content-type="text/plain"
    2015:12:30-17:22:19 sophosfw httpproxy[31148]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.28.181" dstip="54.214.29.183" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xc535000" url="api-global.netflix.com/.../resume" referer="secure.netflix.com/.../darwinpointer.js error="" authtime="0" dnstime="76243" cattime="166" avscantime="10010" fullreqtime="18305896" device="0" auth="0" ua="Gibbon/2014.1.5/2014.1.5: Netflix/2014.1.5 (DEVTYPE=SSTV-HKM2-; CERTVER=2)" exceptions="" reputation="trusted" category="112" reputation="trusted" categoryname="Entertainment" content-type="text/plain"
    2015:12:30-17:22:19 sophosfw httpproxy[31148]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.28.181" dstip="54.214.29.183" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2278" request="0xc57f000" url="api-global.netflix.com/.../stop" referer="secure.netflix.com/.../darwinpointer.js error="" authtime="0" dnstime="66488" cattime="421" avscantime="7307" fullreqtime="13213242" device="0" auth="0" ua="Gibbon/2014.1.5/2014.1.5: Netflix/2014.1.5 (DEVTYPE=SSTV-HKM2-; CERTVER=2)" exceptions="" reputation="trusted" category="112" reputation="trusted" categoryname="Entertainment" content-type="text/plain"
    2015:12:30-17:22:19 sophosfw httpproxy[31148]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.28.181" dstip="54.214.29.183" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2282" request="0xc536800" url="api-global.netflix.com/.../logblob" referer="secure.netflix.com/.../darwinpointer.js error="" authtime="0" dnstime="64051" cattime="430" avscantime="7955" fullreqtime="14146212" device="0" auth="0" ua="Gibbon/2014.1.5/2014.1.5: Netflix/2014.1.5 (DEVTYPE=SSTV-HKM2-; CERTVER=2)" exceptions="" reputation="trusted" category="112" reputation="trusted" categoryname="Entertainment" content-type="text/plain"
    2015:12:30-17:22:20 sophosfw httpproxy[31148]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.28.181" dstip="54.214.29.183" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2367" request="0xc536800" url="api-global.netflix.com/.../releaseLicense" referer="secure.netflix.com/.../darwinpointer.js error="" authtime="0" dnstime="0" cattime="260" avscantime="8351" fullreqtime="578152" device="0" auth="0" ua="Gibbon/2014.1.5/2014.1.5: Netflix/2014.1.5 (DEVTYPE=SSTV-HKM2-; CERTVER=2)" exceptions="" reputation="trusted" category="112" reputation="trusted" categoryname="Entertainment" content-type="text/plain"

    The web filter is blocking it because if I turn webfiltering off Netflix works. I've added netflix.com and samsungcloudsolution.net including sub domains in the whitelist.

    Anyone know a solution to this?

  • Good Morning,

    thx for your reply. I Can see it in my e-mail but not in the forum?!

    Try this; create an exception list (filtering options / exceptions) for the ps4 host like this one:

    Here are regexp´s for the target domains:

    ^https?://([A-Za-z0-9.-]*\.)?playstation\.net/
    ^https?://([A-Za-z0-9.-]*\.)?playstation\.com/
    ^https?://([A-Za-z0-9.-]*\.)?playstation\.org/
    ^https?://125\.199\.254\.51
    ^https?://198\.107\.*\.*
    ^https?://184\.84\.65\.*
    ^https?://173\.230\.216\.*
    ^https?://50\.19\.100\.125
    ^https?://209\.251\.*\.*
    ^https?://([A-Za-z0-9.-]*\.)?loris-e\.llnwd\.net/
    ^https?://([A-Za-z0-9.-]*\.)?playstation\.de/

    Tom

  • Hi Tom,

    That worked a treat! Thanks very much, the PS4 is sorted.

    Netflix not so much, but it seems Netflix uses IP Addresses as well as URLs and they might be different in Australia.
Unfiltered HTML