Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Google ads blocked

After a Google search, if I click on the Google Ads links a security warning appears using any browser.

 

The Sophos SSL Certificate is not recognized and I can't view the page referred from ADS.

Any suggestion ?

 

Thanks in advance.

 

Firmware: SFOS 17.5.10 MR-10



This thread was automatically locked due to age.
Parents
  • Pierluigi,

    please also share the web filtering used. I suspect that you are blocking ADS URL category.

    Regards

  • The error message is:

    The FW Rules for outgoing are the default...(no rules)

    I tried to disable in the default web  policy "Advertisements" in the "No Ads or Explicit Content", but no changes.

     

    It seems to me that www.googleadservice.com is related to a wrong CA. Could be ??

    Pierluigi

  • Pierluigi,

    we do not see from the screenshot if the firewall rule, https scanning is enabled.

     

    Thanks

  • From the "In Use" column I can see you are not actually using the "No Ads or Explicit Content" web policy.  You are however using the Default Policy.

    Assuming you haven't made any changes, the Default Policy blocks the User Activity "Suspicious".  If you then go to the User Activity tab you see that Suspicious includes the category Advertisements.

     

    So anything that uses a firewall that has a web filter policy of Default Policy will have Advertisements blocked.  The way the XG blocks advertisements is with a block page served using its own CA.

    If you do not want to block advertisements, the easiest thing is to add a rule to allow Advertising above the rule to block Suspicious.  Alternately you can change the block Suspicious to a your own list of categories or even change the definition of suspicious.

     

    You may also want to try clicking on the Log Viewer (top right corner) and then switch to Policy Test.  That can be used to determine exactly why you are being blocked.

  • Michael You hit the problem.....thanks.

    Yes, the issue is related to Adversiment blocked by Default policy in the Suspicious Block.

    I verified it using Policy Test (i don't know until now this feature ;-) )....

    Then for now I set Web policy to "none" in the #Default_Network_Policy firewall rule...

    My goal will be to manage better the web policy.

     

    Many thanks to all.

    - Pierluigi

     

  • Hi  

    We glad that the issue got resolved.

    Thank you  for sharing your expertise.

    Regards,

    Keyur
    Community Support Engineer | Sophos Support
    Sophos Support VideosKnowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link

Reply Children
No Data