Sophos XG Home edition and Battle.net

the neverending story with sophos generally.

horror with microsoft exceptions, also many other programms.

for blizzard / battlenet I have the following urls in exceptions configured:

^([a-zA-Z0-9.-]*\.)?origin-[A-Za-z]\.akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?eaassets([0-9])*-[A-Za-z]\.akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?blizzard\.com/

^([a-zA-Z0-9.-]*\.)?blzddist1-a.akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?battle\.net/

the neverending story with sophos generally.

horror with microsoft exceptions, also many other programms.

for blizzard / battlenet I have the following urls in exceptions configured:

^([a-zA-Z0-9.-]*\.)?origin-[A-Za-z]\.akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?eaassets([0-9])*-[A-Za-z]\.akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?blizzard\.com/

^([a-zA-Z0-9.-]*\.)?blzddist1-a.akamaihd\.net/

^([a-zA-Z0-9.-]*\.)?battle\.net/

Hi,

what exceptions did you apply? Are you using the Web proxy?

Please post a copy of your rule.

When reviewing logviewer did you see all of the exceptions listed? What ports have you listed?

Ian

 A list of ports you need in your rule also battle.net will not work with SSL/TLS even with exception.

i am switching at the moment from utm to xg. actually i perepare and configure the new xg appliance, the utm still runs.

in utm it was sufficient to configure the exceptions under web filter.

does this apply to xg?

That was the fix. Thanks man. Do you run Sophos at home?

sorry, am i stupid?

Which exactelly was the solution?

Web protection exceptions, firewall policies or a combination of both?

web exception:

ah yes, so the list from me worked? if so it would be nice to mark that also as solution... ;) for several games and clients there are different exceptions.

the mentioned ports from rfcat did they got any relevance in any policy?

SSL/TLS exceptions (Web -> URL Groups) should be good enough and you don't need that Reg-Ex stuff, just add the domains:

...and yes...running sophos at home.

This. Shouldn't be using the old-school web proxy, but rather the new DPI inspection, and when you use that this URL group is sufficient. No need for crazy regex's.