This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocked Website

WichF 4 months ago

Hello,

currently I have a problem with my sophos XGS Firewall. I would like to allow a specific Website for our marketing department. tiktok.com

I also add this site to "Allowed URLs for Default Policy" and "Local TLS exclusion list" but nothing happened.

Thats my error from firewall:

Error: Server did not respond to client hello

Does anyone know how I can solve this problem?

Felix

This thread was automatically locked due to age.

Top Replies

Michael Dunn 4 months ago +1 suggested

The URL Group you mention - assuming you have a proper policy for it - would be used in Web Policy. But you are not getting a Web Policy block. Having the connection reset, it is more likely that you are…

0 Vivek Jagad 4 months ago

Hi WichF .

Thank you for reaching out to the community, try to diagnose via - : How to TCPdump ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn 4 months ago

The URL Group you mention - assuming you have a proper policy for it - would be used in Web Policy. But you are not getting a Web Policy block.
Having the connection reset, it is more likely that you are being blocked by Application Control. If so, you need to make a change in your Application filter policy.
Cancel
Vote Up +1 Vote Down

Cancel
0 rmora 4 months ago

Hello,

From the SSL inspection message ID 19017 the issue seems like a TLS error, check this related post: SSL Inspection KEY_TYPE__UNKNOWN - Discussions - Sophos Firewall - Sophos Community

Verify the maximum compatibility SSL/TLS inspection profile and check the TLS version set, if needed you can create a new inspection profile with TLS 1.3 enabled
Cancel
Vote Up 0 Vote Down

Cancel
0 rmora 4 months ago in reply to rmora

Also verify if the Local TLS exclusion list rule is enabled on the SSL/TLS inspection under Protection/Rules and Policies/SSL/TLS inspection
Cancel
Vote Up 0 Vote Down

Cancel