Your client does not have permission to get URL..

Hi Erdem Topaloglu, 

How often this happens in the machines behind XG? This doesn't seem to be caused by the firewall. 

Although Did you check with any other browser or by clearing the cache of the current browser? 

Hello DeveshM.

This happens 100% of time. We've tried multiple browsers (IE,Edge,Mozilla,Chrome) Every machine behind FW is having this issue. By the way, when we punch in exacty URL to address bar it works. This happens when users do search. ISPRouter > XGFW > PCs  this network giving us this problem. When we change it to ISPRouter > PCs everything works fine. Btw endpoints are disabled and enabled both scnarios tried. 

Hi,

try disabling the ssl/tls setting for a trial.

Ian

Hello Ian,

I've checked the settings upon your suggestion but it was already off.

Hello Ian,

I've checked the settings upon your suggestion but it was already off.

Should only be turned off for testing purposes.

ian

Hello Ian,

Yeah. I enabled it back. Problem persists. I now have an active support ticket as well for this issue. Hoping to find out reason and come up with a solution so I can update here as well.

Best regards,

Hi Erdem Topaloglu,

Would it be possible for you to replicate the issue and run a packet capture on firewall GUI to confirm the firewall rule number? Is the traffic from the user filtered by the correct firewall rule? 

• Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI

You could also do a policy test from the log viewer.

• Sophos XG Firewall v17: How to use the Policy Test tool

If the policy test result is allowed, I'd say it's a possible client-side issue. 

However, did you try to clear browsing data on your browser? or reinstall the web browser? 

Thanks,

Problem is resolved by Public IP change by the ISP. Thank you all for the support.

Glad to hear that the issue was resolved :)