Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Sophos Email: Time-of-Click returning 401 access denied error

Overview

As of January 20, 2021, we have received customer reports of users experiencing "401 access denied" errors when clicking Time-of-click links in emails.

If you are experiencing this issue, please raise a support case, attach the affected email as a sample (in RFC822 /.eml format), and mention the ID XGE-18542.

Workaround 1

Get the original URL if the rewritten email cannot be resent.

  1. Copy-paste the rewritten URL in Notepad++.
  2. Select everything after &u= up to the next & sign. This usually ends with 
  3. Right-click the selected text > Plugin commands > Base64 Decode.
  4. Copy-paste the selected text into a URL decoder to get the real link.
Note: Be careful when opening the decoded URL as it could be malicious. Try opening the link for trusted emails.
 

Workaround 2

If the email can be resent from a trusted sender and the issue occurs for every email from them, the URL can be added to the URL allow list temporarily. To do this, go to Global Settings > URL allow list.


Related information

Time-of-click feature information: docs.sophos.com/.../eg_EmailToCsummary.html

KB: https://support.sophos.com/support/s/article/KB-000040928?language=en_US



Added tags
[edited by: Raphael Alganes at 1:17 AM (GMT -7) on 8 Jun 2023]