This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XGS 136 firewall rule issues with Bloomber TV with Android TV's

I have set up Web Default Filtering rule on XGS136 with HTTP/S scanning and IDS is active.  If I turn off the Default Rule it works but then it stops working.

I added three domains related to Bloomberg as an exclusion.

Is there a better way for the Android TVs to access Bloomberg TV in an office environment without showing playback errors after a couple of hours?



This thread was automatically locked due to age.
  • Disable the HTTP/S scanning and check. You need to search for all the urls which are used for the secure communication needs to add into exception.

    Following the document to create suitable profile for such traffic.


    docs.sophos.com/.../index.html

    -----------------------

    Thank & Regards,

    Nilesh Mojidra

    If a post solves your question, use the 'Verify Answer' link.

  • Hi Nilesh,

    Below is a screenshot of what I have applied today.

    I have applied the following exception in Web Protect:

    ^([A-Za-z0-9.-]*\.)?bloomberg\.com\.?/
    ^([A-Za-z0-9.-]*\.)?bloomberg\.net\.?/
    ^([A-Za-z0-9.-]*\.)?blpprofessional\.com\.?/
    ^([A-Za-z0-9.-]*\.)?btogo\.com\.?/
    Skip
    HTTPS decryption
    HTTPS certificate validation
    Malware and content scanning
    Zero-day protection
    Policy checks
     
    I am waiting for Bloomberg to provide a list of domains?  I also have applied the following exception rules and set the web filtering policy back to Default to reinstate security.
    What I am not familiar with is the Profiles link you sent with certificates.  How does this align with Bloomberg Media Streaming App for Android Smart TVs. 
  • Perfect, I'm suggesting the same. Also, you can exception in ATP as well as if required.

    -----------------------

    Thank & Regards,

    Nilesh Mojidra

    If a post solves your question, use the 'Verify Answer' link.