Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions Block From on HTTP BAP - IP list BUG

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 8 replies
Subscribers 39 subscribers
Views 17444 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block From on HTTP BAP - IP list BUG

lferrara over 8 years ago

Trying to block certain public IP to access web server using HTTP template will only work if single host ip is added.

The Block From supports even IP Lists but after the object is added, nothing appears on "Block from"

Luk

This thread was automatically locked due to age.

0 vilic over 8 years ago

Luk, I couldn't reproduce the problem in my lab.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to vilic

Vilic,

thank you for your answer. Is the LabClient a single IP or an IP List?
If I try to add an IP list, it adds but then the Block from is empty again.

Luk
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to lferrara

So block from seems to support IPList when you create a new object but will not accept it.

Luk
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 8 years ago in reply to lferrara

It looks that IP List is not supported, but the create new object dialog will allow the creation. It will appear as an object in Hosts and Services -> IP Host.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to vilic

So it is a bug.
Also IP group should be supported into next releases.

Luk
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago

Can someone from Sophos confirm the Bug?

No way to add IP lists inside HTTP BAP. [:(]

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to lferrara

The same bug/limit is not fixed on MR-2.

[:(][:(][:(]
Cancel
Vote Up 0 Vote Down

Cancel