So... why are NVIDIA drivers suddenly taboo to download?

So then it looks like webfilter exceptions override firewall rules? I remember this happening with the UTM too. It just must have to do with the flow of how data is inspected.

I'm not going to lie to you, the firewall is very tricky to configure and I spend a lot of time trying to figure things out with multiple ways of accomplishing the same thing. 

Have you tried my method, of changing the category of downloads.nvidia.com from Unacceptable to Acceptable? This essentially overrides the shareware & freeware categorization block for that downloads.nvidia.com driver. But if the exception worked, then it worked. It would be good to see some more screenshots to be sure.

Either change the category from Unaccptable to Acceptable, or this exception should be all you have to do: something similar to this...

Classified as Executable files.....

For that error to occur, you must have HTTPS inspection enabled with .EXE or .MSI as a blocked filetype.

This is getting stupid.

I tried to download a driver.

As you said the test for download.nvidia.com returns shareware.

Ian

As does mine, however my original post for downloading shows otherwise, because it's from download.nvidia.com, which does get categorized as Shareware... which its not at all.

I'm still just reeling on the fact that I can add a URL category to completely bypass a top list firewall rule, and something as trash as Shareware at that...

Hi Amodin,

my XG shows Nvidia.com as

When I connect to the site it show America. I have a country block for China, but not Taiwan. I did not try to download and drivers, but I do get a selection list.

Ian

Just... wow.  I can't believe this.

So trying to figure this out again, I get a notification of another download for drivers.  I created a web exception in my Safe Downloading exceptions list which I add a regex entry for ^([A-Za-z0-9.-]*\.)download\.nvidia\.com/ and try again.

Nope, not allowed.

Then I look at the log viewer, and I see that my Country Blocking Rule to China is denying me any access to the download.  No problem, I get that, the CDNs probably are redirected all over the place.

But - I then do something that I tell myself, "No way, this shouldn't be allowed."

I add back the Download Shareware and Freeware category back into my same Safe Downloading exceptions.

It starts downloading.

Why on this earth, would you tell someone's top rule of "No, not at all" to be bypassed by a shareware category of all things?  Am I just not getting this methodology? That's okay, but adding my explicit regex exception isn't allowed?  Does this not make sense to anyone else?  For me, this just screams "Foul".

I'd rather keep the Shareware out of acceptable, and rather have the domain acceptable.  I have a regex exception for nvidia.com, I will try it with download.nvida.com and see if I can mess with that.

Likely you have to separate between the CDN and the Nvidia Website. 

So the CDN Part of your URL is categorized by Intelix as Shareware/Freeware Download CDN: intelix.sophos.com/login

Could you change the category of Download Freeware and Shareware from Objectionable to Acceptable?

Or perhaps create a URL entry for all download.nvidia.com subdomains, and classify them as Acceptable?

I don't think it's possible to use regex for URL entries though.

I checked my log viewer this morning, and I don't have anything identical to downloading drivers, which is about right - it's been over a month since the last driver update for me (Log goes back 30 days).  However, there are a lot of other entries with that domain, but different sub-domains that were allowed and categorized as 'Information Technology'.  

I don't see how the drivers would be any different of a category.  They aren't shareware.