Customers might be unable to connect with us via the Sophos Malaysia Support Hotline number. Our teams are actively working on a fix. In the interim, we request customers to use the backup hotline number - +65 3157 5922 (Singapore) or raise a support request at https://support.sophos.com/.

Help us enhance your Sophos Community experience. Share your thoughts in our Sophos Community survey.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 5 subscribers
  • Views 3938 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM WebFilter - credentials Abfrage

MichaelbeiGDH

UTM, 9.703-3

Hallo Kollegen,

wir haben den Webfilter im Standard-Modus aktiv und erhalten bei vielen
Webseiten seit ca. 4 Wochen eine Abfrage der credentials.
Abbrechen drücken reicht, damit die Seite ganz normal geladen wird.
Auslöser sind js-Bestandteile der Webseiten,
z.B. bei focus.de

Edge-Log:
(Index):274 GET a.bf-ad.net/.../adengine.js net::ERR_ABORTED 407 (Proxy Authorization Required)

Sophos Log:
2020:07:22-09:58:13 asg220-2 httpproxy[7910]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="172.20.10.83" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction=" ()" size="2468" request="0x1065fc00" url="https://a.bf-ad.net/" referer="" error="" authtime="1" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="117" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.40" exceptions="application"
2020:07:22-09:58:13 asg220-2 httpproxy[7910]: id="0003" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="172.20.10.83" dstip="" user="" group="" ad_domain="" statuscode="407" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction=" ()" size="2468" request="0x1065fc00" url="https://a.bf-ad.net/" referer="" error="" authtime="8" dnstime="0" aptptime="0" cattime="0" avscantime="0" fullreqtime="108" device="0" auth="2" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.40" exceptions="application"

Beim direkten Aufruf der URL kommt eine block-page mit Blocked Category (Content Server) ohne Proceed Button,
also greift hier die default block Regel.

Workaround momentan Ausnahme-Authentifizierungs-Regel für die URLs. Jedoch kaum praktikabel. Da dies pro Webseite gemacht werden muss.
Hat da Jemand eine Idee?
Support-Fall bei Sophos ohne Ergebnis.

Vielen Dank!



This thread was automatically locked due to age.
Unfiltered HTML