This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firefox update is blocked by Sophos UTM

Hi,

It looks like Firefox update is being blocked by Sophos UTM by default. I wouls like to know how to remove that limitation. This is what I get when I try to download the Firefox installer manually.

While trying to retrieve the URL:

stubdownloader.services.mozilla.com/

The content is blocked due to the following condition:

The URL you have requested matches a forbidden application. If you think this is wrong, please contact your administrator.

Application:

Mozilla

Your cache administrator is:

Thanks

This thread was automatically locked due to age.

Parents

0 apijnappels over 6 years ago

Look in Web protection -> Application control -> application control rules, you might have a block rule containing "Mozilla".

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel
0 Andy Johnson over 6 years ago in reply to apijnappels

I have done that already. I have found one webservice called "Mozilla" and I have added it to allow from all internal IPs.

Auto update is not working but even when I go to download firefox manually, the following url is blocked:

https://stubdownloader.services.mozilla.com/?attribution_code=c291cmNlPXNlYXJjaC55YWhvby5jb20mbWVkaXVtPXJlZmVycmFsJmNhbXBhaWduPShub3Qgc2V0KSZjb250ZW50PShub3Qgc2V0KSZ0aW1lc3RhbXA9MTUzMjE3NjQxMg..&attribution_sig=2da30c1f34e53648b5d71a3a39f235f947e56597cf62a008da1f340ad11da9d2&lang=en-US&os=win&product=firefox-stub

and here is the blocking error message:
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 6 years ago in reply to Andy Johnson

You show the allow rule as rule #7. Is there any block rule higher than that which may include Mozilla?

Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to Andy Johnson

Guys, Application Control "Allow" rules are only "Exceptions" for a subsequent "Block" rule. AppCtrl is only capable of blocking applications.

Do you have the following Exception?

Look in the Web Filtering log file to see which Filter Action was in use when the Firefox download failed and then show a picture of it.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 6 years ago in reply to Andy Johnson

Guys, Application Control "Allow" rules are only "Exceptions" for a subsequent "Block" rule. AppCtrl is only capable of blocking applications.

Do you have the following Exception?

Look in the Web Filtering log file to see which Filter Action was in use when the Firefox download failed and then show a picture of it.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data