Thread Info
  • State Verified Answer
  • +4 person also asked this people also asked this
  • Locked Locked
  • Replies 20 replies
  • Answers 1 answer
  • Subscribers 18 subscribers
  • Views 7403 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Suspicious Wi-Fi connection detected

Ron Feole

The Intercept X app on my android phone keeps giving me the notification "Suspicious Wi-Fi connection detected".  When I tap on it, it takes me to Network details where I see "SSL interception detected".

I've rebooted my router.  Also, I've disconnected my phone from the WiFi network, tapped "Forget", and then reconnected twice.  But, I still keep getting the same notification.

What do I need to do to find out what the problem is?



This thread was automatically locked due to age.
  • 0

    Same here. I checked the logs and found
    NGENSS; 2023/03/21 13:24:25; I; wifi-security check threat found for: "WLAN" result: SSID: "WLAN"
    isOnline: true
    isConnectedToWifi: true
    isConnectedToMobile: false
    isRedirection: false
    isPinningError: true
    isCaptivePortal: false
    isCaptivePortalSafe: false
    wrongDnsLookup: false
    isSslStripping: false
    isArpSpoofed: false
    isNotRedirectingToHttps: false
    dnsRedirect: false
    isUnsecureContentInSecureSite: false
    WiFi security type: PSK

    Shows this only on Android devices but not on IOS device

  • 0

    I receieved this message this morning as well. The only thing the logs show is Pinning=True. 

  • +1

    Hi Ron,

    Thanks for reaching out to the Sophos Community Forum. 

    Could you try the following to see if the results change? 

    1. Clear the app cache of the Intercept X Mobile app and reinstall it 
    2. Reset your network settings 
    3. Try a different Android device
    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0

    Same here, also got autostart not enabled when it is. Restarted my phone and WiFi issue seems to have gone away for now, but auto start still complaining.

    Update: still have the issue, had hit the ignore button it seems

  • 0

    Good day all. I'm having the same problem. It just started today the 21st of March 2023.

    The first thing that stands out is that I am only getting this error message when I come back to my house and connect to my Wi-Fi.  Note that I have three or four different SSIDs on my network here and each one that I try to connect to gives me the same warning message.

    For the sake of completeness and to help troubleshoot this problems I'm using the ASUS router with firmware from The accepted (to be official) ASUS-WRT-Merlin.net site.

    ALSO:. I have sofas running on my Windows 11 machine and I AM connected to the SAME network and I am  NOT getting the error message on my laptop. 

     Thanks in advance for the help folks. 

  • 0

    Same issue on my Galaxy S21. Been using Sophos for years, and I've never seen this alert until the last day or so.

  • 0

    Okay I reported a problem earlier where this occurs at my house on an ASUS router.  

    However I'm now over at my in-laws and connecting through an Xfinity Wi-Fi router at their house, and I have the exact same problem.   

    And, to be clear, the problem at a lower level is "SSL interception detected"  

  • 0 in reply to David Calle

    Thank you for reaching the community forum.

    Can you confirm what OS you're currently facing with this detection? Was it android or IOS?

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0 in reply to Qoosh

    I have followed these steps and it does seem to have resolved the situation for me - thank you. Not sure where the verify button is so that others know.

  • 0 in reply to Qoosh

    Hi Qoosh,

    Thank you,

    after reinstallation the problem seems to be solved. There no more warning. 

    Now i just want to know: what was the reason? And is the connection clean now?

    Best regards 

    Elsa Konrad 

Unfiltered HTML