Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions Blocked Website

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 4 replies
Answers 2 answers
Subscribers 42 subscribers
Views 2063 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocked Website

WichF 4 months ago

Hello,

currently I have a problem with my sophos XGS Firewall. I would like to allow a specific Website for our marketing department. tiktok.com

I also add this site to "Allowed URLs for Default Policy" and "Local TLS exclusion list" but nothing happened.

Thats my error from firewall:

Error: Server did not respond to client hello

Does anyone know how I can solve this problem?

Felix

This thread was automatically locked due to age.

Top Replies

Michael Dunn 4 months ago +1 suggested

The URL Group you mention - assuming you have a proper policy for it - would be used in Web Policy. But you are not getting a Web Policy block. Having the connection reset, it is more likely that you are…

Parents

0 rmora 4 months ago

Hello,

From the SSL inspection message ID 19017 the issue seems like a TLS error, check this related post: SSL Inspection KEY_TYPE__UNKNOWN - Discussions - Sophos Firewall - Sophos Community

Verify the maximum compatibility SSL/TLS inspection profile and check the TLS version set, if needed you can create a new inspection profile with TLS 1.3 enabled
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rmora 4 months ago

Hello,

From the SSL inspection message ID 19017 the issue seems like a TLS error, check this related post: SSL Inspection KEY_TYPE__UNKNOWN - Discussions - Sophos Firewall - Sophos Community

Verify the maximum compatibility SSL/TLS inspection profile and check the TLS version set, if needed you can create a new inspection profile with TLS 1.3 enabled
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rmora 4 months ago in reply to rmora

Also verify if the Local TLS exclusion list rule is enabled on the SSL/TLS inspection under Protection/Rules and Policies/SSL/TLS inspection
Cancel
Vote Up 0 Vote Down

Cancel