Sophos Central Firewall Manager (CFM) maintenance scheduled for Wednesday, July 8th starting at 06:30 GMT. Expected time to complete is 5 hours. Partners will be unable to access CFM during this period.
We'd love to hear about it! Click here to go to the product suggestion community
Hello we have a web application being published through UTM. Im facing the below error while try to access the page thorugh the firewall. It seems to decode a URI in the request which is messing up the request. How can I override this. Please see the log below.
httpd: [core:notice] [pid 23242:tid 4121860976] [client 184.108.40.206:50008] AH00026: found %2f (encoded '/') in URI (decoded='/sap/opu/odata/UI2/PAGE_BUILDER_PERS/PageSets('/UI2/Fiori2LaunchpadHome')'), returning 404, referer: http://ourdomain/sap/bc/ui5_ui5/ui2/ushell/shells/abap/Fiorilaunchpad.html
we have the same problem with our gitlab server.
2017:08:31-09:05:04 httpd: [core:notice] [pid 28330:tid 2938100592] [client 10.0.254.240:51432] AH00026: found %2f (encoded '/') in URI (decoded='/CB/bsp/network/feature/core'), returning 404, referer: https://ourdomain/CB/bsp/network/develop
In the apache there is a AllowEncodedSlashes directive.
But I did not found anything in the Sophos UTM.
In reply to Benjamin Hecht:
Hi, did you ever find a solution for this? I've the same problem with SAP Fiori Launchpad!
In reply to Lutz Fiekens:
Yes, I found a solution. You must add some settings to the apache config.
Add here this line
Then restart the Proxy
This change is for all proxy settings. You can add the line also to one configuration but after a restart or a change you must add it again.
Thanks, Benjamin and welcome to the UTM Community!
It's always great to see a first post be something that helps the rest of us!
Cheers - Bob
I had moved this service to another firewall as it was not fixed on this. I will test it out here again and let you know
For another workaround of this missing configuration option see: https://community.sophos.com/products/unified-threat-management/f/general-discussion/92242/utm-9-reverse-proxy-configuration/436406#pi2353filter=answers&pi2353scroll=false