The issue is seen only with netflix apps. Samsung Smart TV app, Android and iOS app, all seem to not work with the Sophos UTM Web Filter in transparent mode.
Here is what I've done so far. I've set a static IP on my TV, made an exception rule for that IP that will exclude it from everything I could check (Authentication / Caching / Block by download size / Antivirus / Extension blocking / MIME type blocking / URL Filter / Content Removal / SSL scanning / Certificate trust check / Certificate date check). A bit excessive but hey I was still having issues after just excluding it from antivirus, URL filter and SSL scanning.
Once I did that the NetFlix app on the TV will work but fails with a very generic message after streaming anywhere from 30 seconds to 3 minutes into the video.
At this point I started with Google searches. I found the suggested exception list so I added that, excluding from ALL filtering and such. This was the filter:
Matching these URLs: ^https?://([A-Za-z0-9.-]*\.)?nflximg\.com\.?/
^https?://([A-Za-z0-9.-]*\.)?nflxvideo\.net\.?/
^https?://([A-Za-z0-9.-]*\.)?netflix\.com/
^https?://[\d+(\.\d+){3}/]*/[0-9]{8}\.ism
^https?://[\d+(\.\d+){3}/]*/[0-9]{9}\.ism
^https?://[\d+(\.\d+){3}/]*/[0-9]{10}\.ism
^https?://([A-Za-z0-9.-]*\.)?netflix-*.vo.llnwd.net/.*
^https?://secure\.netflix\.com/*
^https?://uiboot\.netflix\.com/*
^https?://nintendo.nccp.netflix.com/
^https?://customerevents.netflix.com/
^https?://api-global.netflix.com/
^https?://([A-Za-z0-9.-]*\.)?nflxvideo.net/
^https?://ipv6_1.lagg0.c[0-9]{1,3}.[A-Za-z][A-Za-z][A-Za-z][0-9]{1,3}.ix.nflxvideo.net/
^https?://([A-Za-z0-9.-]*\.)?nflximg\.net\.?/
^https?://cdn[0-9].nflximg.com/
^https?://cdn[0-9].nflximg.net/
^https?://108.175.[0-9]{1,3}.[0-9]{1,3}/\?o=([A-Za-z0-9.-]*\.)?
or Coming from these user agents: Mozilla/5.0 (compatible; U; Nflx) Netflix/[0-9].[0-9].[0-9]
Gibbon/[0-9]{1,4}.[0-9]{1,4}.[0-9]{1,4}/[0-9]{1,4}.[0-9]{1,4}.[0-9]{1,4}: Netflix/[0-9]{1,4}.[0-9]{1,4}.[0-9]{1,4} (DEVTYPE=NFX[0-9]{1,4}-[0-9]{1,4}-; CERTVER=[0-9]{1,4})
After that, still no change at all. The app still randomly fails.
Next I disabled scanning of all HTTPS. Still fails.
Lastly I disabled web filtering all together, NetFlix works just fine on all devices.
Rebooted the UTM, tried again with web filter on. Fails after 1-3mins with the same generic error. Turn Web Filter back off, it works just fine.
At this point I do not see any module blocking any traffic to or from my TV. I've had (at one point) 5 or 6 different live monitors up. None show anything being blocked but the NetFlix app still fails.
Thanks all.
Oh, the hardware I'm using for this UTM:
Supermicro 1U X7SPA-H
Intel Atom D525
8GB DDR3
2x Intel 82571EB Gigabit NIC
2x Intel 82574L Gigabit NIC
This thread was automatically locked due to age.
