This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Instagram/Facebook Videos Buffering

Hi folks,

I am struggeling with iOS devices (iOS 14) behind a Sophos UTM Firewall using Firmware 9.705-3. The UTM is using Firewall Rules, Intrusion Prevention and Endpoint Protection features. Instagram stories, IGTV videos and Facebook videos are buffering all the time once the devices are behind the Sophos UTM and I don't know what's the problem...

I tested it without the UTM going directly to the router and it's working fine. Therefore somethings not right within the UTM. LiveLogs are fine, traffic won't be blocked on the devices. Please help, it's just annoying and I can't figure out what's going on...

All other streaming services like YouTube, Netflix, Amazon Prime Video are working fine on the iOS devices...

BR,

fl4m1ngh0m3r

This thread was automatically locked due to age.

Top Replies

FormerMember over 3 years ago in reply to fl4m1ngh0m3r +1 verified

fl4m1ngh0m3r , Thank you for the update. Intrusion Prevention is a different feature; disabling, it will not disable Anti-Dos/Flooding. Just for testing, disable Anti-Dos/Flooding for UDP and check…

Parents

0 FormerMember over 3 years ago

Hi fl4m1ngh0m3r,

Thank you for reaching out to the Community!

Did you configure Anti-Dos/Flooding under Network Protection > Intrusion Prevention?

Is web filtering configured on your firewall?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 fl4m1ngh0m3r over 3 years ago in reply to FormerMember

Anti-Dos/Flooding is active. Web Filtering is not used in my configuration. I just turned off the whole "Intrusion Prevention" feature. Makes no difference...
Cancel
Vote Up 0 Vote Down

Cancel
+1 FormerMember over 3 years ago in reply to fl4m1ngh0m3r

fl4m1ngh0m3r,

Thank you for the update.

Intrusion Prevention is a different feature; disabling, it will not disable Anti-Dos/Flooding.

Just for testing, disable Anti-Dos/Flooding for UDP and check if that helps. If all the applications start working, then you have to change the values.

Thanks,
Cancel
Vote Up +1 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to fl4m1ngh0m3r

Hallo and welcome to the UTM Community!

Agreed with Harsh. You will want to take a look at Rule #1 in Rulz (last updated 2020-11-12).

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
+1 fl4m1ngh0m3r over 3 years ago in reply to BAlfson

Thank you guys, it seems like it's working now when the UDP Flood Protection is deactivated. Do you have a recommendation for the thresholds? Below you can see my setting how it was used before.
Cancel
Vote Up +1 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to fl4m1ngh0m3r

It's probably the Destination packet rate and you can confirm that in the Intrusion Prevention log. You'll just have to experiment. Let us know what you find.

It would be a preferable solution in this situation to simply create an Intrusion Prevention Exception for the relevant IPs you see blocked for UDP flooding in the log.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 3 years ago in reply to fl4m1ngh0m3r

It's probably the Destination packet rate and you can confirm that in the Intrusion Prevention log. You'll just have to experiment. Let us know what you find.

It would be a preferable solution in this situation to simply create an Intrusion Prevention Exception for the relevant IPs you see blocked for UDP flooding in the log.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data