This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ISSUE WITH INTERNET CONNECTION ¿Maybe Certificates?

Hi there, happy new year everybody.

We are using SG210. UTM 9. Since the 20th of December we are not having practical use of internet because we are just a few people at office. But next week everybody will come back from holidays and this problem still happening at least 5-6 times a day. When we are surfing on the internet suddenly stop working and shows this image.

Same with our antivirus PANDA, it shows that it lost connections to it's servers and drop off connection and ask for a proxy. This cuts are 10-20 seconds, then we reload the page we were surfing and everything OK. We will restart both Sophos, working together on Cluster this weekend. I think it's something related to certificates. But I don't know where to go further.

Thanks,

Alex.

This thread was automatically locked due to age.

Parents

0 sachingurung over 6 years ago

Hi Alex,

Download the CA from Web Filter > Filtering Options > HTTPS CA and import it to the trusted root authorities folder via Microsoft Management Console or Always Trust it in the KeyChain if you are using a MAC. This is caused when you have HTTPS Decrypt & Scan enable but the CA is not imported as the trusted authority.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 sachingurung over 6 years ago

Hi Alex,

Download the CA from Web Filter > Filtering Options > HTTPS CA and import it to the trusted root authorities folder via Microsoft Management Console or Always Trust it in the KeyChain if you are using a MAC. This is caused when you have HTTPS Decrypt & Scan enable but the CA is not imported as the trusted authority.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 kerobra over 6 years ago in reply to sachingurung

If the problem only comes 5 to 6 times a day I believe they do not have https scanning active.

I wonder how the problem "solves", by waiting, retrying, rebooting the UTM? I sometimes have this behaviour on UTMs with AD-authentications, transparent mode and https scanning set to URL filtering only. The problem is, that the correct filter action doesn't apply and therefore the default content block filter action jumps in. Which UTM firmware version is used on the UTM220?

Regards,

Kevin

Sophos CE/CA (XG, UTM, Central Endpoint)
Gold Partner
Cancel
Vote Up 0 Vote Down

Cancel
0 Soporte INGESER over 6 years ago in reply to sachingurung

Okey, just did it.

Thank you!
Cancel
Vote Up 0 Vote Down

Cancel
0 Soporte INGESER over 6 years ago in reply to kerobra

Hi, 80% the problems surround me solves restarting PC, Switch, etc... That's the first thing I will try.

We are using SG210 with Firmware 9.506-2

Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 6 years ago in reply to Soporte INGESER

Hi,

Do you have an internal DNS server, it could be a local issue caused due to caching in the local servers. Also, try restarting HTTP Proxy by executing the command in the shell:

/var/mdw/scripts/httpproxy restart

If that doesn't work, PM me the remote access ID of the UTM and I will look into the configurations.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Soporte INGESER over 6 years ago in reply to sachingurung

Hello, I was about to reply, It seems to be like it was.

We have an internal W2008Server DNS yes. I will do that http proxy restart tonight, not now, people are working. I will reply tomorrow.

Thank you!
Cancel
Vote Up 0 Vote Down

Cancel
0 Soporte INGESER over 6 years ago in reply to sachingurung

Okey, seems to be done. What a week of work mate, thanks in advance.

Tomorrow monday, we will be working at office and we will check how it is now!
Cancel
Vote Up 0 Vote Down

Cancel
0 Soporte INGESER over 6 years ago in reply to sachingurung

It happens less but still happening. Front my point of view.
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 6 years ago in reply to Soporte INGESER
Hi Soporte,

Two Questions:

Did you verify this using different web browsers? Could be a browser issue.

Are all the systems affected or some particular ones?

Enable the remote support access ID and PM me. I will take a look at the configurations.

Thanks
Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Soporte INGESER over 6 years ago in reply to sachingurung

Hi Sachingurung,

Answering to your questions:

1. It happens with IE, Firefox or Chrome... It shows a sophos warning screen saying: Unable to connect to host. But 10-15 seconds later, you refresh the page and works fine.

2. We just saw problems with browsers & Panda Antivirus (It lose connection and pop-up us a screen that ask for a proxy tunnel, uploaded image in the OP).

I will PM you.

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 Soporte INGESER over 6 years ago in reply to sachingurung

I need help with this, users are all the day telling me they have this momently issue.
Cancel
Vote Up 0 Vote Down

Cancel