This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why can I Download EICAR wenn DPI is on

I want to Change Virus protection to ssl/DPI on Sophos V 18.

I set a ssl rule. When I go to the original eicar website i can´t download any Eicar testfile.

On this website

I´m able to download eicar (zip) and eicar (double zip) when ssl/DPI is on. When I change to webproxy download will be blocked.

Is that a bug of V18 ?

Dirk

This thread was automatically locked due to age.

Parents

0 dirkkotte over 4 years ago

Hi,

a little bit feedback from TO.

My problem with DPI ... missing/incorrect "SSL/TLS inspection rules" within "Rules and policies".

Try it again the last days ... working without problems .. if configured correctly.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 DirkJung over 4 years ago in reply to dirkkotte

Hallo,

here are my rules:

My SSL/TLS Inspection rule:

This ssl/TLS rule is by sophos:

My Firewall Policy:

Dirk
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to DirkJung

Assuming we are currently waiting for V18.0 MR1, i would suggest to install MR1 and retest this website. Actually it should work as expected.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
+1 FloSupport over 4 years ago in reply to LuCar Toni

Hi All,

Thank you DirkJung for reporting this and to LuCar Toni for following up:

Our development team is investigating this issue under the ID NC-59103.

This is specifically related to the DPI engine and using the EICAR test file. Protection against legitimate viruses is not impacted.

Thanks,

Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+1 FloSupport over 4 years ago in reply to LuCar Toni

Hi All,

Thank you DirkJung for reporting this and to LuCar Toni for following up:

Our development team is investigating this issue under the ID NC-59103.

This is specifically related to the DPI engine and using the EICAR test file. Protection against legitimate viruses is not impacted.

Thanks,

Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data