Traffic inspection bug relay_invalid_traffic

More legitimate traffic blocked

core_memory and IOraiden,

As has been asked before - please contact support and have them escalate until it gets to devs so we can investigate your boxes.

Complaining more on the forum does nothing because we cannot reproduce the problem.

this can be reproduced but since these are http pipeline requests they say that is not supported by the DPI mode.

Actually i cannot find any application within my appliances and my peer appliances, which have http pipeline requests beside netflix. 

None of my own appliances with DPI enabled and Office365/Teams etc. uses http pipeline.

My question would be, which application within the microsoft world is causing this? 

I have no Idea, I have normal Windows 10 Pro machines with office 2019.

I guess they will fix it or do something about, but I guess if any customer complains about  this the workaround would be to create a proxy rules for those clients, and the it won't even be a priority for Sophos to solve.

Another option would be to create a Firewall rule for the destinations, using FQDN host objects, that uses the proxy instead of DPI mode. This would be more targeted that just using the proxy for all traffic from those clients.

But, that doesn't work in IPv6 firewall rules.

I think it makes sense to share in this forum that using DPI mode causes this problem. I also learned about this issue in this forum. If we share the case, we may find some hints to reproduce this issue.

I can't contact support.

I am using the virtual version on VMware ESXi 7.0U1.

Thanks to everyone who has reported sites or applications that trigger the HTTP pipelining issue.

Could you also confirm which firmware version you are using when you make these reports. There were some issues addressed in v18.0 MR4 where packet boundary issues sometimes caused the Firewall to report pipelining where it wasn't actually being used. If you're not using MR4, it would be great if you could upgrade and see if the problem persists.

I am using v18.0 MR4.
Unfortunately, there are still issues.