allow a difficult website

Hi chanklish,

What is the firmware version on your firewall? 

Would it be possible for you to post the screenshot of the error and how the web filtering exception is added? 

Thanks,

hi , it keeps turning with nothing loading or giving certificate error or need to sign in network

Hi,

are you using DPI or the web proxy to access the site? I was able to gat as far as the login page without making any changes to my XG.

Ian

i dont have the "use proxy in place of dpi" checked and no proxy in the browser

So you are using the dpi?

i think so , i do not understand the difference after the v18 firmware change 
i want to block mostly everything except this site but i think sophos is blocking the certificate chain or some other link needed 

You will need to tick the use http instead leaving the box blank and also allow all at this stage.

ian

i did not understand, please explain

Please post a copy of your firewall rule and I will describe the steps.

ian

here it is , i am also looking to re-tighten the security here once this site is dealt with

The box on the top right needs to be ticked.

When you are confident this is working we can start on restricting your internet acces.

Ian

The box on the top right needs to be ticked.

When you are confident this is working we can start on restricting your internet acces.

Ian

use web proxy ? why should i use it ?

Because it works with most websites. You do not need to do anything to your clients. You can delete most of your exceptions. Dpi has some issues at the moment that are expected to be fixed in the next mr hopefully.

ian

i managed to open the site but i get certificate errors unless i allow completely 
on pc with allow all i have valid certificate
on pc without sophos : valid certificate

on pc with sophos : invalid ( attached ) - what can in sophos block this ?

What sophos are you asking about, the XG or the antivirus installed on the pc?
if you have not enabled https scanning you should not be seeing any errors caused by the firewall.

ian