This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application Filter Categorisation Challenge

ptho 7 months ago

Hi Sophos,

A user at our org was sent a link to access a document online. This document was hosted by autoexel[.]info which doesn't flag up as malicious using any of the tools available to us, but the Sophos Firewall determines is a TOR Proxy, and blocked per the assosciated Application Policy paired to the rule.

We don't want to allow access to TOR at our site but we don't suspect this domain to be malicious in nature and therefore would like to access it. Are there any methods available to us to permit/exempt this URL from this application filter categorisation, or is there a way to submit this to Sophos for reanalysis.

Thanks

This thread was automatically locked due to age.

Parents

0 Vivek Jagad 7 months ago

Hello ptho ,

Thank you for reaching out to the community, you can either add the exceptions or Allow/block websites using custom categories and/or URL groups.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad 7 months ago

Hello ptho ,

Thank you for reaching out to the community, you can either add the exceptions or Allow/block websites using custom categories and/or URL groups.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 ptho 7 months ago in reply to Vivek Jagad

Hi,

I will try this soon. Are you able to confirm why this site is categorised as such? If Sophos is aware of a concern regarrding this site I would side with their classification, but from what I have available to me it does not appear to be a site of concern.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 7 months ago in reply to ptho

You can refer Web category descriptions.

Additionally, refer: Do you have a potential threat that you would like us to analyse?
Send us a malicious file, spam email, website URL, or Application Control request for analysis or visit our SophosLabs page to learn about known threats and Sophos products.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel