Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 42 subscribers
  • Views 1098 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Websites load slowly or not at all without Web-Proxy

SM-ITM

Hello,

we have the problem that in general all websites load slowly and many others do not load at all. We use version 19 (SFV4C6 / 19.0.0-B317) as VM in Hyper-V.

Here are some examples of websites that cannot be accessed at all:

The basic problems (e.g. DNS or WAN-Connection) can definitely be ruled out. We spent several hours with the Support of Sophos and they desperately adjusted all the options. We were then told that we must enable in a rule the "Use web proxy instead of DPI engine" option for HTTP & HTTPS-Connections.

But that doesn't make any sense to us at all. Why do we have to enable the old web proxy to be able to access websites quickly and generally? There must be a way to access websites (HTTP/HTTPS) without web filtering. The other question is why the problems also exist with the DPI-Engine and only the old web proxy works reliably.

As mentioned above, after activating the following options, all websites can be loaded without problems and also at a good speed:

  • Use web proxy instead of DPI engine > Active
  • Web-Policy > Any (e.g. Allow All)

Maybe someone can help us or explain the background.

Thanks!



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    the web proxy is used if you want full policy scanning.and the DPI engine does not as of the current version scan UDP traffic. In the web settings do you have any boxes ticked, if so you will be using the web proxy.

    Icloud will need exceptions enabled along with all the other apple sites.

    Ian

    XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    This. Are there any TLS decryption rules in effect? If so, do is there an earlier rule that forces no decryption for the Sophos-maintained list? (And also your hand-curated list.The very first thing I look at when a website fails is if it showed up as decrypted in the TLS logs.

Reply
  • 0 in reply to rfcat_vk

    This. Are there any TLS decryption rules in effect? If so, do is there an earlier rule that forces no decryption for the Sophos-maintained list? (And also your hand-curated list.The very first thing I look at when a website fails is if it showed up as decrypted in the TLS logs.

Children
Unfiltered HTML