Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 39 subscribers
  • Views 2356 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com Response Code 502

LHerzog

While examining the Firewall logs, I find allmost all (95%+) requests to https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/

are getting response codes 502 Bad Gateway from the webserver.

Some get 500 and only very few get 200.

Why is this happening.

The requests are made through XG firewall v18 mr5 so we can see thatr clear in the logs.

Of course this URL is excluded from all SSL scanning by default URL groups

The CA serving this Signed by Sophos SHA256 MCS Root CA3 which is unknown to XG. But as SSL Decryption is disabled, this should not be an issue.

2021-07-03 12:22:53,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="212" user="" user_group="" web_policy_id="4" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx5.66" dst_ip="52.57.55.128" protocol="TCP" src_port="59584" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2067039488" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 12:22:52,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.240" dst_ip="52.57.55.128" protocol="TCP" src_port="50307" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2624050176" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 12:20:28,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.226" dst_ip="3.126.142.231" protocol="TCP" src_port="60706" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1199291904" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 12:19:31,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.34" dst_ip="3.126.142.231" protocol="TCP" src_port="51297" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="4193390976" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 12:10:39,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.26" dst_ip="18.185.204.77" protocol="TCP" src_port="49912" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2340628032" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 12:08:36,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.29" dst_ip="52.29.31.195" protocol="TCP" src_port="54196" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1226561792" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 12:02:38,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.26" dst_ip="52.29.127.85" protocol="TCP" src_port="49709" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="508162752" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 12:00:29,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.226" dst_ip="52.57.55.128" protocol="TCP" src_port="60671" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2178119936" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:51:37,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.199" dst_ip="3.66.47.242" protocol="TCP" src_port="54321" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2504986368" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:44:48,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.20" dst_ip="52.29.127.85" protocol="TCP" src_port="35490" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="802876864" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:41:24,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.237" dst_ip="18.198.68.56" protocol="TCP" src_port="59822" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="747644800" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:39:16,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.236" dst_ip="35.156.69.124" protocol="TCP" src_port="53110" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1411351488" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:30:41,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.229" dst_ip="35.156.69.124" protocol="TCP" src_port="64569" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2177015296" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:29:11,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.11" dst_ip="52.28.156.103" protocol="TCP" src_port="55983" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2931569024" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:25:55,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.31" dst_ip="52.29.127.85" protocol="TCP" src_port="56702" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="770358784" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:23:41,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.229" dst_ip="52.59.118.127" protocol="TCP" src_port="62627" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1429827328" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:23:27,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.229" dst_ip="52.57.55.128" protocol="TCP" src_port="62579" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1427645696" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:20:27,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.211" dst_ip="18.159.30.61" protocol="TCP" src_port="53962" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1403526016" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:18:06,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.120" dst_ip="3.66.130.48" protocol="TCP" src_port="64643" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="458617856" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:17:11,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.15" dst_ip="52.29.127.85" protocol="TCP" src_port="36692" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1411475008" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:16:01,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.15" dst_ip="3.126.142.231" protocol="TCP" src_port="49746" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="985113856" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:14:59,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.25" dst_ip="52.57.10.240" protocol="TCP" src_port="59722" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1368724480" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:03:17,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.80" dst_ip="18.185.204.77" protocol="TCP" src_port="62563" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2076283904" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:02:23,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.27" dst_ip="3.121.89.198" protocol="TCP" src_port="51664" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1429827328" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 11:00:13,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.29" dst_ip="18.185.204.77" protocol="TCP" src_port="51883" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="825516992" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 10:58:52,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.11" dst_ip="18.198.68.56" protocol="TCP" src_port="55725" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1996159232" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 10:53:52,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.24" dst_ip="18.198.68.56" protocol="TCP" src_port="59976" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="4125453120" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
2021-07-03 10:47:48,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.228" dst_ip="18.159.30.61" protocol="TCP" src_port="51972" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="458594240" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,

this is not helpful:

https://support.sophos.com/support/s/article/KB-000035229?language=en_US

and the status is asumed to be good:



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com domain is used for MCS component of Sophos.

    Could you please take an observation by adding below URLs in custom exception and skip all checks?

    *.mcs2-cloudstation-eu-west-1.prod.hydra.sophos.com
    *.mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
    *.mcs2-cloudstation-us-east-2.prod.hydra.sophos.com
    *.mcs2-cloudstation-us-west-2.prod.hydra.sophos.com


    It would be great if you can share a log event with status_code="200" as well.

  • 0 in reply to FormerMember

    Hi,

    those requests are as default Sophos Setting pushed through DPI engine and there all sophos domains are skipped by the managed TLS exception URL list.

    I will add those FQDN you mentioned anyway.

    Here a list of all requests that have a status_code logged.

    06.07.2021;09:26:30,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="52.58.51.210";protocol="TCP";src_port="50195";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2929268672";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:26:17,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="173";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.205.28";dst_ip="52.28.79.68";protocol="TCP";src_port="51471";dst_port="443";bytes_sent="790953";bytes_received="359130";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2930614592";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:20:59,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="35.156.69.124";protocol="TCP";src_port="50155";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="758123328";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:18:13,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="3.66.130.48";protocol="TCP";src_port="62246";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="161453056";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:11:44,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="187";user="";user_group="";web_policy_id="7";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.67";dst_ip="35.156.69.124";protocol="TCP";src_port="50664";dst_port="443";bytes_sent="441079";bytes_received="207535";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1228222208";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:08:17,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="52.58.42.40";protocol="TCP";src_port="62172";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2623020224";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:07:12,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="52.58.51.210";protocol="TCP";src_port="49983";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2931469440";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:05:22,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="18.159.30.61";protocol="TCP";src_port="49961";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="541724416";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;09:01:35,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="18.185.204.77";protocol="TCP";src_port="62111";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="750728832";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:58:54,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="2";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.7.65";dst_ip="52.57.55.128";protocol="TCP";src_port="53114";dst_port="443";bytes_sent="23243";bytes_received="7166";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="500";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="4096256192";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:58:28,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.9.66";dst_ip="18.185.204.77";protocol="TCP";src_port="51387";dst_port="443";bytes_sent="7498";bytes_received="4868";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2068309568";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:56:32,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.7.65";dst_ip="52.58.51.210";protocol="TCP";src_port="53056";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2337955008";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:55:16,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="52.29.127.85";protocol="TCP";src_port="49794";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2504987648";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:54:54,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.225.229";dst_ip="52.29.127.85";protocol="TCP";src_port="51290";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="751980928";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:54:20,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="52.59.118.127";protocol="TCP";src_port="49779";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1409271040";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:53:25,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="52.28.79.68";protocol="TCP";src_port="49746";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2329560640";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:48:49,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="3.66.47.242";protocol="TCP";src_port="49604";dst_port="443";bytes_sent="1357";bytes_received="501";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1503800768";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:47:54,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.222.23";dst_ip="3.66.47.242";protocol="TCP";src_port="49588";dst_port="443";bytes_sent="1432";bytes_received="3607";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1391695168";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:45:05,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="121";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.40.5";dst_ip="3.66.130.48";protocol="TCP";src_port="50270";dst_port="443";bytes_sent="6756";bytes_received="5217";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="500";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2930828864";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:44:15,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="35.156.69.124";protocol="TCP";src_port="61958";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="581757440";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:37:05,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.205.31";dst_ip="52.59.118.127";protocol="TCP";src_port="49717";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="3300809600";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:34:53,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="2";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.7.74";dst_ip="52.28.156.103";protocol="TCP";src_port="54629";dst_port="443";bytes_sent="2164";bytes_received="7194";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="500";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="797991872";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:32:44,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.225.226";dst_ip="52.28.156.103";protocol="TCP";src_port="65184";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="4092607680";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:28:16,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="2";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.13.4";dst_ip="52.28.156.103";protocol="TCP";src_port="51670";dst_port="443";bytes_sent="26889";bytes_received="6299";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2623013824";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:22:20,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="38";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="5";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.9.22";dst_ip="52.58.51.210";protocol="TCP";src_port="50070";dst_port="443";bytes_sent="7866";bytes_received="5566";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="500";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1385588928";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:21:56,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="52.28.79.68";protocol="TCP";src_port="61761";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2625223232";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:21:17,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="2";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.13.4";dst_ip="52.29.127.85";protocol="TCP";src_port="50820";dst_port="443";bytes_sent="5451";bytes_received="5762";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="500";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="4089712064";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:16:53,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="18.185.204.77";protocol="TCP";src_port="61712";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1505321600";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:16:26,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="227";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.52.92";dst_ip="52.59.118.127";protocol="TCP";src_port="62079";dst_port="443";bytes_sent="18954";bytes_received="5385";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1428285312";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;08:07:04,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.225.226";dst_ip="52.57.55.128";protocol="TCP";src_port="65161";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1226217728";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:59:28,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="3.66.47.242";protocol="TCP";src_port="61565";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1409275840";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:57:31,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="2";user="xxxxxxx@internaldomain.dom";user_group="internalgroupname";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.10.60";dst_ip="18.185.204.77";protocol="TCP";src_port="51417";dst_port="443";bytes_sent="22235";bytes_received="17814";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="200";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="449436544";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:57:15,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.225.225";dst_ip="52.28.156.103";protocol="TCP";src_port="51218";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2338069056";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:50:03,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="52.57.55.128";protocol="TCP";src_port="61489";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1369047680";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:46:28,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="52.58.42.40";protocol="TCP";src_port="61456";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1387046464";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:37:54,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.225.226";dst_ip="52.29.127.85";protocol="TCP";src_port="65132";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1407661696";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:37:44,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.9.116";dst_ip="52.29.127.85";protocol="TCP";src_port="49236";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1191256704";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:37:28,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.9.116";dst_ip="52.29.127.85";protocol="TCP";src_port="49721";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2440515648";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:30:24,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.225.225";dst_ip="3.66.130.48";protocol="TCP";src_port="50079";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="1422254080";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:23:56,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="18.195.252.244";protocol="TCP";src_port="61236";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2179544704";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:15:27,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="3.66.47.242";protocol="TCP";src_port="61160";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="802448320";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:12:38,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="18.159.30.61";protocol="TCP";src_port="61140";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2244441088";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:03:11,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.225.226";dst_ip="3.66.47.242";protocol="TCP";src_port="65105";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2069310912";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;07:01:34,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="212";user="";user_group="";web_policy_id="4";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.55.66";dst_ip="3.126.142.231";protocol="TCP";src_port="61047";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="765191104";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;06:49:24,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.10.198";dst_ip="3.66.130.48";protocol="TCP";src_port="49260";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="458597632";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,
06.07.2021;06:43:36,messageid="16001";log_type="Content;Filtering";log_component="HTTP";log_subtype="Allowed";status="";fw_rule_id="5";user="";user_group="";web_policy_id="2";web_policy="";category="None";category_type="";url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/";content_type="";override_token="";response_code="";src_ip="xxx.xxx.10.198";dst_ip="52.29.127.85";protocol="TCP";src_port="65496";dst_port="443";bytes_sent="0";bytes_received="0";domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com";exception="";activity_name="";reason="";user_agent="";status_code="502";transaction_id="";referer="";download_file_name="";download_file_type="";upload_file_name="";upload_file_type="";con_id="2180771904";app_name="";app_is_cloud="0";override_name="";override_authorizer="";used_quota="0";,

  • 0 in reply to LHerzog

    from my first look today I'd say this has improved much compared to yesterday. Still some 502 responses. but way less frequent.

Reply Children
No Data
Unfiltered HTML