Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 33 replies
  • Subscribers 50 subscribers
  • Views 10179 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Traffic inspection bug relay_invalid_traffic

l0rdraiden

Is this bug going to be fixed, or it has become a feature with a workaround?

Workaround

https://support.sophos.com/support/s/article/KB-000035989?language=en_US&c__displayLanguage=en_US#How-to-Enable-relay_invalid_traffic

BUG reason="HTTP parsing error encountered."

https://community.sophos.com/xg-firewall/sfos-eap/sfos-v18-early-access-program/f/feedback-and-issues/117316/bug---ssl-tls-inspection-seems-to-break-honeywell-smart-devices

BUG reason="HTTP pipelined request encountered."

https://community.sophos.com/xg-firewall/f/discussions/119219/bug-web-filter-blocking-random-categories



This thread was automatically locked due to age.
Parents
  • 0

    This is still an issue there are too many services using http pipelined connections to ignore it.

    Official Sophos response, http pipelined is not an issue and is not supported because nobody uses it.

    Now microsoft joins to netflix and many other companies that are already using it. Maybe someday Sophos XG will block windows updates and still won't be an issue.

  • 0 in reply to l0rdraiden

    Even in my environment, there are logs with the reason "HTTP pipelined request encountered."

    URL
    http: //go.microsoft.com/fwlink/?LinkID=XXX&clcid=0xXXX
    https: //www.dell.com/TLTarget.aspx
    They all seem to be using Akamai. It may not matter.


    User Agent
    MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT
    Firefox 84.0
    Safari 14.0.2

Reply
  • 0 in reply to l0rdraiden

    Even in my environment, there are logs with the reason "HTTP pipelined request encountered."

    URL
    http: //go.microsoft.com/fwlink/?LinkID=XXX&clcid=0xXXX
    https: //www.dell.com/TLTarget.aspx
    They all seem to be using Akamai. It may not matter.


    User Agent
    MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT
    Firefox 84.0
    Safari 14.0.2

Children
No Data
Unfiltered HTML