google.com is on and off and some time not accessible at all

Hello Jean Pierre HABIMANA ,

Thank you for reaching out to the community, I recommend you to follow the Sophos Firewall: Best practices.

Hello, we're using XGS 116, we have the same experience.  strangely only google.fr is sometimes blocked,  not bing.  tried on several web browsers, the same. 

Hi,

please check your DNS settings.

Ian

Thanks for your reply,   to correct what I said in my post,  it's google.fr  fr.wikipedia sometimes be "blocked".  I don't think it's the problem of DNS,  as we didn't change any DNS related settings in firewall  

When access fails, are you able to perform a traceroute to the site?

Ian

Hello,  yes I could tracert to google.fr.  I believe this problem is linked to "QUIC" problem known by Sophos.   the weird part is I didn't select "Block QUIC traffic" in FIrewall setting.    anyway,  I switched to Microsoft Edge,  seems works fine until now (the other browsers all suffer the same problem)

I had to setup a special firewall rule to allow QUIC for FB access only. FB appears to have implemented the use of QUIC in the last month or so.

Ian

Does a restart of the web proxy service sort it out and have you noticed in the web filter log if those sites are categorised correctly? not coming up as "None" for example?

Regards

QUIC traffic cannot be scanned by the XG.  However selecting block QUIC the browsers should switch to HTTP/HTTPS.

When people say "Blocked" do you mean you have a Block page and a block reason?  Does it appear in the log viewer?

Are you using the feature Enforce SafeSearch in the Web Policy?  This change the DNS resolution of certain google owned domains as per their instructions.

The FB (application not web access) sites that use QUIC fail if the traffic is not passed by the XG, 

Ian