This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web exception for subnet network

Shunze Lee over 2 years ago

Hi All,

I try to add subnet network in Web exception, but it (example: 203.104.150.0/24) didn't work.

So I have to bypass the subnet network in top firewall rule.

Is there any way to bypass subnet network in Web exception?

Shunze

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 2 years ago in reply to Shunze Lee +1 suggested

Yes, its the transparent web proxy. Likely this does not work on a exception based on Networks. Workaround would be the firewall or moving to DPI engine, which can do this IP bypass.

0 emmosophos over 2 years ago

Hello Shunze,

Thank you for contacting the Sophos Community.

It should be possible to add a Network under Web Exception.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Shunze Lee over 2 years ago in reply to emmosophos

I tried it already.

This didn't work, that's why I ask in Community.
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 2 years ago in reply to Shunze Lee

Hello,

Please clarify, what is not working for you?

Do you get an error when you’re trying to add the subnet or what part is not working?

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Shunze Lee over 2 years ago in reply to emmosophos

Hi Emmanuel,

Https decrypte and scan interrupt the use of Line messenger.

No any special messages, but Line just can't work with connection failed...

So I need to bypass the following FQDN, IP & Network for it.

^[A-Za-z0-9.-]*\.line-apps\.com/
^[A-Za-z0-9.-]*\.line\.naver\.jp/
analytics.pokki.com
data.appexnw.com
lan.line.me
nelo2-col.nhncorp.jp
stickershop.line-scdn.net

119.235.235.4
210.61.248.91
23.48.143.4

203.104.150.0/24
203.104.153.0/24

FQDN and IP can be bypassed with web exception.

Only the 203.104.150.0/24 and 203.104.153.0/24 network web exception can't work.

I have to create a top firewall rule without any filte to bypass the 203.104.150.0/24 and 203.104.153.0/24 network.

Shunze
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Shunze Lee

You use the legacy web proxy?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Shunze Lee over 2 years ago in reply to LuCar Toni

I didn't use any proxy setting, just use web filter on firewall rule.

It should be transparent proxy, I think.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Shunze Lee

Yes, its the transparent web proxy. Likely this does not work on a exception based on Networks. Workaround would be the firewall or moving to DPI engine, which can do this IP bypass.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel