Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 10 replies
  • Answers 2 answers
  • Subscribers 43 subscribers
  • Views 28648 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adobe flash player is blocked by web filter

KJ AN

I have enabled the Web filter's default policy.
As a result, adobe flash player can not be downloaded.

The following message is displayed on the client's web browser.
Adobe flash player is a healthy website.
Why is it blocked?

 

This is a message from the IT Department.

The web site you are trying to access:
admdownload.adobe.com/.../flashplayer24_ha_install.exe
is listed as a site within the category Information Technology

Current Internet Access Configuration for you does not allow visiting sites within this category at this time.

If the website has been erroneously blocked, please submit it for re-evaluation.



This thread was automatically locked due to age.
Parents
  • 0

    The current block pages are not always descriptive on why something was blocked.  There is a generic block page that has the category in it, suggesting category problems when it is really something else.

    In v17 the block pages are all getting a UI overhaul, which should remove this type of confusion.

  • 0 in reply to Michael Dunn

    OK I have a similar problem and am trying to unblock some google and gmail items.  It is important or I cannot upload files or check mail.  

    The filter is under loss of productivity.

     

    I have made my own filter so the original is intact.  I have duplicated all the categories.

    When I try to go in to edit one of those.  I have to click on Select Individual application.  Then I click on the box beside name (selecting  all the boxes.)

    There are 3019 boxes.  I want to deselect 5.  or possibly allow the 5.

     

    Here is my problem.

    Once the "Select individual application" button is on the Smart filter grays out. 

    I want to type in Gmail, google, google drive or Facebook.

    I now cannot search 3019 for those 5.  I have to hand do it.  (This takes an hour now or more.)

    I say ok and now have clicked that select all box (the one under select all ... there are two.)

    Now I get about 30 selected and the rest of the 3019 are unselected.

     

    Do I take another hour to select them all?....  aggg  Not so easy.

     

    I am trying to be helpful and point out that there is a flaw in the system.

     

    Does anyone have an easier way to allow 5 things through the firewall with an exception rule.

    I would think that the first set of rules are denied and an allow rule can now be added after. 

     

     

    Thanks in advance

    Rick M

     

  • 0 in reply to ADogNamedGromet
    Create a new application filter, use "Block generally unwanted apps" as a template, so you not have your own copy.  edit it.
    Click Add to create a new row.  Select indivual applications.
    Beside Name click the little filter icon.  Type Google.  Select your stuff.
    At the bottom make sure Action is Allow.
     
    I think (not tested) that this should allow those applications and still block the rest.
Reply
  • 0 in reply to ADogNamedGromet
    Create a new application filter, use "Block generally unwanted apps" as a template, so you not have your own copy.  edit it.
    Click Add to create a new row.  Select indivual applications.
    Beside Name click the little filter icon.  Type Google.  Select your stuff.
    At the bottom make sure Action is Allow.
     
    I think (not tested) that this should allow those applications and still block the rest.
Children
  • 0 in reply to Michael Dunn

    It does this thing where if search is used it Greys out any kind of individual selection.

    so I have added all of the google search in one shot and allowed them.   

     

    Not exactly what I wanted but now Gmail works and Facebook.

    It added 20 allow rules of google all at once.

    But it works and the other 3019 are still in place and blocked.  Which is acceptable and a good thing.

     

    It is very fiddly around search Greying out and individual / group selection.

     

    Although "google" is allowed.  I hope it doesn't allow some odd ball company that has the word google in the title. 

    like EG Google toolbar app.

     

    It is kind of a catch all. 

  • +1 in reply to ADogNamedGromet
    There are two completely different ways of searching and two completely different ways of selecting apps.
    Lets call one a search and the other a filter.  And the ways of selections, lets call one individual app selection and the other is filter selection.
     
    Use the dropdowns at the top to select...  lets say Category=Gaming and Risk=High.  What you are doing is using a filter.
    There are four items listed, greyed out, and they look like they are checked.  In fact they are not checked - instead the "Select All" is used.
     
    When you click Save - it does not save the fact you are blocking four applications.  It saves the filter.  It creates a filter selection.  So that if next week Sophos adds another 3 applications to be High Risk Games they are also blocked.  Because what you have saved is a filter selection for "Select All matching this filter".
     
    If instead you switch to "Select individual applications" and then check the four, when you click save it will save the fact you are blocking four applications.  This is no longer a filter selection, it is an individual app selection.  If Sophos adds more High Risk Games they are not blocked.
     
    You cannot mix these two concepts.  You cannot say "Block all current and future High Risk Games except for this one" in the one rule.  Because that would be mixing a filter selection and an individual app selection.
     
    So far we've been talking about creating a rule based on a filter selection.  That is different from "Search".
     
    You can also completely ignore the filter and use the little icon beside the column header "Name".  That allows you to search through all the list so that you can do individual selection of apps.
     
    So - when you say "if search is used it Greys out any kind of individual selection" that is wrong.  What is correct is that if a filter selection is used then you cannot select individual apps.  Because filter selection doesn't save list of apps, it applies to all current and future apps in the filter.
     

    If you enter in "Google" into the Smart Filter and say Select All you are going to apply it to all current and future applications that have Google in the name.
    If you choose "Select Individual Application" and enter in "Google" into the name search and then check off individual applications, you are going to apply it to those applications only.
  • 0 in reply to Michael Dunn

    Thank you.  I understand.

     

    It is not a search but a filter that is always updated with new items.

    I will work with it and see how it goes.

     

    RM

  • 0 in reply to Michael Dunn

    If its so complicated that you need 9 paragraphs to explain how filtering and selecting applications work, it might be time for a UI rethink.

     

    I too struggled with the smart filter not being able to select individual applications. I tried your method and it works, (it creates another separate rule with your subsection of allowed applications, for instance), but god damn is this backwards thinking.

     

    the idea here i think is that the list is of all 3000+ applications, and you are just filtering a subset by the individual rules. The rules themselves are created automatically when you change the status on any members of that list. the new items are then moved between lists (like from deny to allow).

     

    i have never seen an application work quite this way and its extremely counter intuitive.

Unfiltered HTML