Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 1591 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Webfilter - web request blocked - ups.com

Sophos User413

Hallo,

seit ein paar Tagen tritt immer mal temporär das Problem auf das die Website von UPS (https://www.ups.com) nicht aufrufbar ist mit dem Fehler "Error Connection Timeout".

Im Webfilter findet man diese Einträge:

2021:06:10-14:49:35 fwrz01-2 httpproxy[6788]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="x.x.x.x" dstip="104.84.57.177" user="" group="" ad_domain="" statuscode="500" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="517" request="0x10d10300" url="https://www.ups.com/" referer="" error="Connection timed out" authtime="0" dnstime="178342" aptptime="754" cattime="247" avscantime="0" fullreqtime="127430980" device="0" auth="0" ua="" exceptions="" category="105" reputation="neutral" categoryname="Business" application="upscom" app-id="1924"

Nach ein paar Minuten (manchmal 2 bis zu 20) geht es dann plötzlich wieder. Über das Handy oder einen http webproxy beispielsweise geht es die ganze Zeit.

Hat jemand eine Idee was das sein kann?



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    Do you have multiple internal DNS servers configured on your firewall? If yes, I'd suggest you try to query the ups.com to your DNS server when you notice this issue and share the output with us. It could be a DNS issue. 

    Use the command: nslookup <domain.com> <DNS server IP>

    Thanks,

  • 0

    Hallo,

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. Frowning2)

    statuscode="500"  ...  error="Connection timed out"

    If an Exception for Antivirus scanning for ^https?://[A-Za-z0-9.-]*\.ups\.com doesn't resolve this, you will want to skip the Proxy for a DNS Group of www.ups.com.

    Glück gehabt?

    MfG - Bob (Bitte auf Deutsch weiterhin.)

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    hello, thank you both for your reply!

    I did create the Antivirus exception.

    @H_Patel  yes, I have 2 internal DNS-Servers configured. 

    Now I will wait for the issue and let you know. 

    thanks!

Unfiltered HTML