Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 5 subscribers
  • Views 2742 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can not access a particular https site

Dominic Kolandi

Hi,

I was able to access this particular site (https://sls.ncsl.com.pg/Account/Login) a month ago but now I can not access it at all. I can access it outside our company LAN network but can't access is behind the SG 310 firewall appliance.

Have not done any changes (updates,DNAT,etc) to the firewall since I am bit new to Sophos SG 310 Forewall appliance. We have transparent mode enabled.

Can be able to access other sites (Both http and https). I have added the site into website list in filtering option tab but still the same issue.

I urgently need help to resolve it so my stuffs can access.

thanks



This thread was automatically locked due to age.
Parents
  • 0

    Try testing with HTTPS inspection enabled, as it gives you much better detail and it gives you results in real-time.   Without inspection, UTM creates a single log entry when the session ends.   You are probably not seeing the entry because you are watching for it to appear when the end-of-session had not yet been detected.

    Also check the IPS logs.   An IPS block will produce a timeout symptom.

    When using the live log, be sure that the filter is based on the source IP address, not the target URL.   Most large websites include content from many different sources, so a filter based on the destination address will omit critical infomation.

     

Reply
  • 0

    Try testing with HTTPS inspection enabled, as it gives you much better detail and it gives you results in real-time.   Without inspection, UTM creates a single log entry when the session ends.   You are probably not seeing the entry because you are watching for it to appear when the end-of-session had not yet been detected.

    Also check the IPS logs.   An IPS block will produce a timeout symptom.

    When using the live log, be sure that the filter is based on the source IP address, not the target URL.   Most large websites include content from many different sources, so a filter based on the destination address will omit critical infomation.

     

Children
No Data
Unfiltered HTML