This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG85 cause Windows 10 Media Creation Tool to fail

Have a new XG85 installed with defaults and all traffic allowed out.  Before the new firewall was installed Windows 10 media creation tool ran fine.  Now it give an error 0x80200013 - 0x90017 on 3 different machines. 



This thread was automatically locked due to age.
  • We have a XG85 going to the Comcast SMC router. So the Sophos WAN does a DHCP to the SMC and gets a 10.1.10.x address. This is the same setup our Cisco used and worked fine. If I connect straight to the SMC router with a computer, media creation tool works fine. The only thing I haven't tried is turn DHCP off on the SMC and use another static IP as the WAN connection on the Sophos.
    • I looks like you have double-NAT scenario. This is not ideal solution but the most likely it is Web Filtering issue. Turn it off and check.

      Regards,
      Slawek

      • I have the same problem and yes turning things off fixes this, Y on earth do we have to keep turning of security to get simple things like this to work? This is just craziness.
        • By the way I found that HTTP scanning is causing the problem with downloading 'Insider Builds' and the 'Media Creation Tool'
      • Setting Web Filter to None instead of Allow All in the Default Policy fixed the error.
        • Right. So I must keep asking Y do we need to keep disabling protection to get simple things working? This is craziness.
          • That's hardly a solution - you've turned the webfilter off for every device on your network..

            There must be a way to allow it through the webfilter.
            • That's not true. You can enable or disable webfilter for a specific policy. I have a special policy for all my hardware devices like AppleTV.

              Regards,
              Slawek

              • Yes, it is true. He said he had turned off Webfilter in the DEFAULT policy. That means he has turned it off for everything, unless he has then created new policies to turn it on for specific devices - but that would be a back to front way of doing it.

                Turning webfilter off for devices is NOT a solution - it is a workaround. Tuning the webfilter to work properly with Apple devices could be considered a solution, but there does not appear any way to do that currently.
                • Ok, you are right if we consider that there is only one - default policy and there will be no more network/user policies.

                  Regards,
                  Slawek

                  • I agree with you 100% Personally I am getting tiered of every time I turn around I have to disable some protection to get simple things working.
                  • But Y do we have to do that to make it work?
                  • Hi

                    I just encountered the same error message while downloading an Insider Build of Win 10.


                    I set the policy to "none" for web filter to no avail. I the set the filters all to "none" and I still got the same error - ARGH!!!

                    I the disabled malware scanning and et voila it worked !?

                    @sophos


                    Doesn't that look like something to fix within malware scanning and/or the plocies?

                    • This is one reason y I have given up on Sophos and have moved on to another product. To much stuff does not work with XG, Its also completely useless on a home network because you have to turn off to much protection.

                      • So what would you recommend for home use the ? I am still open for suggestion and can still swap.

                        I tried PfSense before and I did get it working with all UTM features but configuration was a little nightmare and it was slower with AV turned on.

                        So XG is at least better than that.

                        • Untangle v12, They now have a new home license as follows, 5.00 a month, 50 a year or 200.00 for 5 years. Its the complete package not a crippled. They have a 14 day trial, Give it a try https://www.untangle.com/

                          Untangle is what I am using now and I have to tell you its a breath of fresh air not to have everything broken when all the protection is enabled.