Since Update 9.715-4 Web Filtering not Working?

Hello Chris,

Good day and thanks for reaching out to Sophos Community

When you say Internet Connection stopped working does it mean even ping from the Firewall, End machines to an external IP/domain does not work? or only web browsing? Also does it happen to all users or isolated cases only? and what error does the end machine is being prompted when trying to browse the web? 

Many thanks for your time and patience and thank you for choosing Sophos

Cheers, 

• Ping to google.de still possible with web filtering on (but slow)
• Websites on all connected devices don´t load (ERR_CONNECTION_TIMED OUT)
• Streaming although not possible

No Log Entries in Web Filtering Live Log. Turning Web Filtering off and everything is fine.

Never had that before...

Hello Chris,

Thanks for these details and apologies that you have bumped into this inconvenience.

Could you please open a support ticket for this to be further investigated then please share with us the caseID once you have it. 

Many thanks for your time and patience and thank you for choosing Sophos.

Cheers,

Guess there is no Ticket-Option for me, i´m Sophos UTM Home Free User.

Again: When turning Web Filtering off, everythings works normal. As soon as i activate Web Filtering in transparent Mode (no authentification), every Website ends with a time out error. Log for Web Filter is completely empty, which is very strange. What do i miss? Anything to do about that 8080-Port?

Guess there is no Ticket-Option for me, i´m Sophos UTM Home Free User.

Again: When turning Web Filtering off, everythings works normal. As soon as i activate Web Filtering in transparent Mode (no authentification), every Website ends with a time out error. Log for Web Filter is completely empty, which is very strange. What do i miss? Anything to do about that 8080-Port?

Hello Chris,

Thanks for this additional information. Could you confirm your UTM's pattern version? under Management>Up2date>Pattern

Also, could you show the error you are encountering with port 8080?

What happens when you use policy test? and could you test disabling all Web Filter profiles and use only the Base Policy? 

Kindly let us know how it goes. Many thanks for your time and patience and thank you for choosing Sophos

Cheers,

Pattern Version: 228881

No Error with 8080. Just a suspicion that the port might be blocked somehow. But the logs don't give anything in this regard.

Policy test: " An error occurred while processing the policy test request."

Base Policy only: WORKS! But i need to tick "Do not proxy HTTPS traffic in transparent mode". If not ticked, same error. Even with Base Policy only Policy test still throws the above error.

Additional Info 1/3: Web Filter Log stays empty all the time (except a short notice when i turn off the filter: "2023:07:28-19:41:22 firew_ttt URID[31081]: T=31081 ------ 1 - [exit] SIGTERM: exiting"); for testing purpose i´ve added a Domain under " Block These Websites" in Base Policy, Domain is NOT blocked, no log entry --> Guess Web Filtering isn´t working at all.

Additional Info 2/3: Selfmonitoring-Log:

2023:07:28-21:32:12 firew_ttt selfmonng[3948]: W triggerAction: 'cmd'
2023:07:28-21:32:12 firew_ttt selfmonng[3948]: W actionCmd(+):  '/var/mdw/scripts/httpproxy restart'
2023:07:28-21:32:14 firew_ttt selfmonng[3948]: W child returned status: exit='0' signal='0'
2023:07:28-21:32:19 firew_ttt selfmonng[3948]: I check Failed increment httpproxy_running counter 1 - 3
2023:07:28-21:32:24 firew_ttt selfmonng[3948]: I check Failed increment httpproxy_running counter 2 - 3
2023:07:28-21:32:29 firew_ttt selfmonng[3948]: W check Failed increment httpproxy_running counter 3 - 3
2023:07:28-21:32:29 firew_ttt selfmonng[3948]: W NOTIFYEVENT Name=httpproxy_running Level=INFO Id=141 suppressed
2023:07:28-21:32:29 firew_ttt selfmonng[3948]: W triggerAction: 'cmd'
2023:07:28-21:32:29 firew_ttt selfmonng[3948]: W actionCmd(-):  '/var/mdw/scripts/httpproxy restart'
2023:07:28-21:32:34 firew_ttt selfmonng[3948]: I check Failed increment httpproxy_running counter 1 - 3
2023:07:28-21:32:39 firew_ttt selfmonng[3948]: I check Failed increment httpproxy_running counter 2 - 3
2023:07:28-21:32:44 firew_ttt selfmonng[3948]: W check Failed increment httpproxy_running counter 3 - 3
2023:07:28-21:32:44 firew_ttt selfmonng[3948]: W NOTIFYEVENT Name=httpproxy_running Level=INFO Id=141 suppressed
2023:07:28-21:32:44 firew_ttt selfmonng[3948]: W triggerAction: 'cmd'
2023:07:28-21:32:44 firew_ttt selfmonng[3948]: W actionCmd(+):  '/var/mdw/scripts/httpproxy restart'
2023:07:28-21:32:47 firew_ttt selfmonng[3948]: W child returned status: exit='0' signal='0'
2023:07:28-21:32:52 firew_ttt selfmonng[3948]: I check Failed increment httpproxy_running counter 1 - 3

Additional Info 3/3:

SSH on Sophos UTM --> /var/mdw/scripts and run ./httpproxy restart:

Restarting httpproxy
:: Stopping httpproxy                                                                                                                    done
:: Starting httpproxystartproc:  cannot execute /var/chroot-http/usr/bin/httpproxy: Exec format error
                                                                                                                                         failed