This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Strange issue with Sophos UTM Web Protection

Hi,

Firstly, I have got to admit, getting here was quite a challenge. It would appear that the Astaro forums have gone now, and this is it's replacement. I can't say that my experience from this new replacement has been good, the overall feel to this isn't very user friendly, just my opinion. Good were the days where you could easily log-on to a forum and start a new thread, where as now, with this replacement, you have to work out how to actually log-on and then join a group before you can create a question... what?!!

Going off topic here, I'll get to the reason why I am here today. For a while now, I have had an intermittent issue with Web Protection and Active Directory SSO authentication, where all web access is blocked. This occurrence only occurs after either a restart of the Sophos UTM or by a restart of ALL domain controllers. This issue only affects devices which use a profile with Active Directory SSO authentication set as the default. I have discovered that when this issue occurs, if I simply visit the eBay website, all web access is restored. If I do not visit the eBay website, all web access is denied by Sophos Web Protection. Web access appears to be fine when using Agent/Browser authentication, this issue does not affect devices which use a profile with Agent/Browser authentication set as the default.

I really don't know what is going on here, the issue has been on-going for some time now and it is getting quite annoying now. Has anybody else experienced this strange anomaly? 

Regards,
Richard



This thread was automatically locked due to age.
  • Hi, Richard, and welcome to the new UTM Community!

    First, we all agree with you about the clunkiness of this place.  Right now, I'm compiling a post that you will find at the top of the General Discussion forum tomorrow.

    I haven't heard of this problem.  What version are you on?  What browser are you using?  Please show us a line from the Web Filtering log where an access was blocked but should have passed.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi Bob,

    I remember you from the Astaro forum, you've helped me several times in the passed! Glad to see that I am not the only one who feels the clunkiness of this new community board.

    I am currently running Sophos UTM Release 9.352-6, I am aware that there is an update available (9.353-4). I have applied roughly 3-4 updates since this issue began, I am unsure of the update version which I started to have this problem with.

    I've had a look at the logs for Web Protection and I have managed to locate part of the log which was logged during this strange phenomena, from looking at the log, it would appear that the UTM is not authenticating the user, thus, defaulting to the default profile which is restricted to no web access. The user then becomes authenticated after visiting "ebay.co.uk", where the username of the user is identified and the user is being sent to the correct Web Protection profile.

    Apologies if the formatting of this log file doesn't line up correctly, I am unsure of how to add "code" to responses on this new board.

    2016:02:01-12:24:03 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="GET" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3290" request="0xc205b800" url="www.msftncsi.com/ncsi.txt" referer="" error="" authtime="1" dnstime="0" cattime="32195" avscantime="0" fullreqtime="32537" device="1" auth="2" ua="Microsoft NCSI" exceptions="" category="105" reputation="trusted" categoryname="Business" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3300" request="0x1087c000" url="external.xx.fbcdn.net/" referer="" error="" authtime="0" dnstime="0" cattime="34104" avscantime="0" fullreqtime="246059" device="1" auth="2" ua="" exceptions="" category="177" reputation="neutral" categoryname="Content Server" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3300" request="0xc2230000" url="scontent.xx.fbcdn.net/" referer="" error="" authtime="0" dnstime="0" cattime="33464" avscantime="0" fullreqtime="250661" device="1" auth="2" ua="" exceptions="" category="177" reputation="neutral" categoryname="Content Server" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3300" request="0x10293000" url="scontent.xx.fbcdn.net/" referer="" error="" authtime="0" dnstime="0" cattime="33378" avscantime="0" fullreqtime="250732" device="1" auth="2" ua="" exceptions="" category="177" reputation="neutral" categoryname="Content Server" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3293" request="0x1025e000" url="https://www.facebook.com/" referer="" error="" authtime="0" dnstime="0" cattime="33384" avscantime="0" fullreqtime="259293" device="1" auth="2" ua="" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3293" request="0x8780800" url="https://www.facebook.com/" referer="" error="" authtime="1" dnstime="0" cattime="33595" avscantime="0" fullreqtime="259791" device="1" auth="2" ua="" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3293" request="0x10a45800" url="https://www.facebook.com/" referer="" error="" authtime="0" dnstime="0" cattime="34015" avscantime="0" fullreqtime="259621" device="1" auth="2" ua="" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3293" request="0x1141a800" url="https://www.facebook.com/" referer="" error="" authtime="0" dnstime="0" cattime="34209" avscantime="0" fullreqtime="259693" device="1" auth="2" ua="" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" reason="category"
    2016:02:01-12:24:50 sophos httpproxy[5658]: id="0060" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden category detected" action="block" method="CONNECT" srcip="10.0.2.13" dstip="" user="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3297" request="0x10be9800" url="https://pixel.facebook.com/" referer="" error="" authtime="1" dnstime="0" cattime="38908" avscantime="0" fullreqtime="247870" device="1" auth="2" ua="" exceptions="" category="195" reputation="trusted" categoryname="Social Networking" reason="category"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.73.89" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="29152" request="0x103a3800" url="http://www.ebay.co.uk/" referer="intranet.hughesnetwork.co.uk/.../" error="" authtime="62" dnstime="1429" cattime="33573" avscantime="34138" fullreqtime="1072402" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="text/html"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="2373" request="0x1153e800" url="ir.ebaystatic.com/.../imgThrobberGrey_30x30.gif" referer="http://www.ebay.co.uk/" error="" authtime="67" dnstime="160" cattime="32626" avscantime="1301" fullreqtime="67098" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="736" request="0x1141a000" url="ir.ebaystatic.com/.../7890_UK_Retail_Xmas_BigWeekend_Doodle_150x30.png" referer="http://www.ebay.co.uk/" error="" authtime="55" dnstime="148" cattime="36528" avscantime="856" fullreqtime="72521" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="4820" request="0x101f4800" url="ir.ebaystatic.com/.../fxxj3ttftm5ltcqnto1o4baovyl.png" referer="http://www.ebay.co.uk/" error="" authtime="78" dnstime="172" cattime="34966" avscantime="1368" fullreqtime="77429" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.138" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1095" request="0xc1c59000" url="rtm.ebaystatic.com/.../s1.gif" referer="http://www.ebay.co.uk/" error="" authtime="57" dnstime="1450" cattime="32631" avscantime="1229" fullreqtime="71259" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="3156" request="0x10492000" url="thumbs3.ebaystatic.com/.../mZLBW_FSfMTN01A0tQHJhZA.jpg" referer="http://www.ebay.co.uk/" error="" authtime="53" dnstime="1606" cattime="29830" avscantime="1664" fullreqtime="82115" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="136" reputation="neutral" categoryname="Online Shopping" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="2587" request="0x111fd000" url="thumbs2.ebaystatic.com/.../mJEkaSx7nYFac_sM9LtS6Hw.jpg" referer="http://www.ebay.co.uk/" error="" authtime="42" dnstime="645" cattime="31853" avscantime="1194" fullreqtime="83573" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="9475" request="0x101b8800" url="thumbs4.ebaystatic.com/.../mkbCfGhLeipRL2WEz2iCGcQ.jpg" referer="http://www.ebay.co.uk/" error="" authtime="45" dnstime="1185" cattime="31648" avscantime="2284" fullreqtime="89640" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="181" reputation="neutral" categoryname="Marketing/Merchandising" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="49" request="0xc1db4800" url="pics.ebaystatic.com/.../s.gif" referer="http://www.ebay.co.uk/" error="" authtime="45" dnstime="1377" cattime="33910" avscantime="929" fullreqtime="72362" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="5474" request="0x1028a800" url="thumbs2.ebaystatic.com/.../mEi70HkQVgwYyYHdSXN1fUw.jpg" referer="http://www.ebay.co.uk/" error="" authtime="44" dnstime="137" cattime="34225" avscantime="1924" fullreqtime="88730" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="33011" request="0xc19dd000" url="ir.ebaystatic.com/.../qj54wxhmfm3oralwkt2qc1z0xqa.css referer="http://www.ebay.co.uk/" error="" authtime="59" dnstime="1537" cattime="35126" avscantime="13621" fullreqtime="107095" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="text/plain"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.138" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="21936" request="0xc1c58000" url="rtm.ebaystatic.com/.../8030_UK_Retail_January_BigWeekend_MREC_300x250.jpg" referer="http://www.ebay.co.uk/" error="" authtime="52" dnstime="149" cattime="30769" avscantime="4982" fullreqtime="85917" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.138" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="16122" request="0x10a9f800" url="rtm.ebaystatic.com/.../7394_UK_Retail_October_Big_Weekend_BREC_300x130.jpg" referer="http://www.ebay.co.uk/" error="" authtime="50" dnstime="161" cattime="35167" avscantime="2889" fullreqtime="80007" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="84808" request="0x10320000" url="ir.ebaystatic.com/.../cr2c5cno0uztdowwgymwkre0l2n.js" referer="http://www.ebay.co.uk/" error="" authtime="41" dnstime="159" cattime="35833" avscantime="26047" fullreqtime="140899" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="application/javascript"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.138" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="114354" request="0x10a9f800" url="rtm.ebaystatic.com/.../8030_UK_Retail_January_BigWeekend_DynamicMFBB_876x402.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="111" avscantime="4593" fullreqtime="145509" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.77.215" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1392" request="0x889a800" url="secureir.ebaystatic.com/.../imgbg.jpg" referer="http://www.ebay.co.uk/" error="" authtime="52" dnstime="1809" cattime="31730" avscantime="1137" fullreqtime="88403" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.138" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="14682" request="0xc1c58000" url="rtm.ebaystatic.com/.../Red-Dynamic-Flag_90x20.png" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="83" avscantime="1305" fullreqtime="176194" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="10904" request="0x1141a000" url="ir.ebaystatic.com/.../s4ibysurhe33rb5mkkfedem2sml.png" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="36406" avscantime="2472" fullreqtime="242470" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="3067" request="0x101f4800" url="ir.ebaystatic.com/.../throbberGrey_30x30.gif" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="36464" avscantime="1112" fullreqtime="241619" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1392" request="0xc19dd000" url="ir.ebaystatic.com/.../imgbg.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="35798" avscantime="1174" fullreqtime="216186" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="64120" request="0x10320000" url="ir.ebaystatic.com/.../sprds3_18.png" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="35522" avscantime="6398" fullreqtime="147410" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="54009" request="0x10291000" url="p.ebaystatic.com/.../sprite_201505141202_opt.png" referer="http://www.ebay.co.uk/" error="" authtime="55" dnstime="1086" cattime="39671" avscantime="4840" fullreqtime="106967" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="43" request="0xc1c58800" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="56" dnstime="1612" cattime="94371" avscantime="1123" fullreqtime="341594" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="5225" request="0x10320000" url="ir.ebaystatic.com/.../7890_UK_Retail_Xmas_BigWeekend_Doodle_245x400.png" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="33975" avscantime="2143" fullreqtime="126678" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:55 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="173.192.220.64" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="966" request="0x8fea800" url="tags.bluekai.com/.../20263 referer="http://www.ebay.co.uk/" error="" authtime="51" dnstime="1292" cattime="32330" avscantime="5036" fullreqtime="277113" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="178" reputation="neutral" categoryname="Internet Services" application="ebay" app-id="134" content-type="text/html"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.62.221" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="42" request="0x8feb000" url="rover.ebay.co.uk/.../9 referer="http://www.ebay.co.uk/" error="" authtime="46" dnstime="1627" cattime="37016" avscantime="1106" fullreqtime="253758" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="181" reputation="neutral" categoryname="Marketing/Merchandising" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.193" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="2108" request="0x10320000" url="ir.ebaystatic.com/.../wqow5zbt4m4xpeucfawaljr4fib.png" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="33100" avscantime="1405" fullreqtime="374990" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/png"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="12804" request="0x8fe9000" url="i3.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="81" dnstime="966" cattime="34069" avscantime="2544" fullreqtime="92395" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0066" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden application detected" action="block" method="GET" srcip="10.0.2.13" dstip="23.195.58.83" user="stephen" ad_domain="HUGHES" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="3464" request="0x8fea000" url="pixel.mathtag.com/.../img referer="tags.bluekai.com/.../20263 error="" authtime="52" dnstime="1581" cattime="33011" avscantime="0" fullreqtime="35007" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="178" reputation="neutral" categoryname="Internet Services" application="BLUEKAI" app-id="805"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="13545" request="0x1087c000" url="i2.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="43" dnstime="135" cattime="37207" avscantime="3048" fullreqtime="97226" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="24562" request="0x10ad7800" url="i1.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="52" dnstime="739" cattime="38163" avscantime="3952" fullreqtime="119877" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="8285" request="0x10a44800" url="i.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="38" dnstime="134" cattime="33929" avscantime="2098" fullreqtime="116873" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="25480" request="0xc19df000" url="i3.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="45" dnstime="158" cattime="33860" avscantime="5119" fullreqtime="135003" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="17124" request="0xc205b800" url="i.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="46" dnstime="310" cattime="36432" avscantime="2690" fullreqtime="153786" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0066" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden application detected" action="block" method="GET" srcip="10.0.2.13" dstip="95.172.94.30" user="stephen" ad_domain="HUGHES" statuscode="403" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="3434" request="0xc19dc800" url="pixel.quantserve.com/.../p-5BCDp_AMwDJtD.gif referer="tags.bluekai.com/.../20263 error="" authtime="49" dnstime="1178" cattime="90" avscantime="0" fullreqtime="492" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="178" reputation="neutral" categoryname="Internet Services" application="BLUEKAI" app-id="805"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="66.211.184.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1267" request="0x103d0800" url="gha.ebay.co.uk/.../getNotification referer="http://www.ebay.co.uk/" error="" authtime="47" dnstime="1650" cattime="35626" avscantime="4480" fullreqtime="493256" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="text/plain"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="20967" request="0x1141a800" url="i1.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="42" dnstime="122" cattime="35501" avscantime="4269" fullreqtime="223327" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="5645" request="0xc1c58800" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="91" avscantime="10307" fullreqtime="619042" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="text/plain"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="14983" request="0x1037e000" url="i3.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="45" dnstime="169" cattime="33848" avscantime="2682" fullreqtime="343048" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="15112" request="0x11421000" url="i.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="38" dnstime="175" cattime="36703" avscantime="2750" fullreqtime="372920" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="58250" request="0x1014e800" url="i.ebayimg.com/.../s-l640.jpg" referer="http://www.ebay.co.uk/" error="" authtime="41" dnstime="184" cattime="34922" avscantime="4103" fullreqtime="400201" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:56 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="20813" request="0xc236f800" url="i2.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="43" dnstime="138" cattime="31769" avscantime="3935" fullreqtime="460101" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="20722" request="0xc2230000" url="i2.ebayimg.com/.../s-l400.jpg" referer="http://www.ebay.co.uk/" error="" authtime="44" dnstime="656" cattime="33028" avscantime="4585" fullreqtime="844765" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="59485" request="0x10291000" url="p.ebaystatic.com/.../19392_wide.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="37754" avscantime="6175" fullreqtime="1320358" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="42626" request="0x889a000" url="p.ebaystatic.com/.../19393_wide_upd.jpg" referer="http://www.ebay.co.uk/" error="" authtime="45" dnstime="178" cattime="34498" avscantime="4131" fullreqtime="92423" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="47820" request="0x889b000" url="p.ebaystatic.com/.../19397_wide.jpg" referer="http://www.ebay.co.uk/" error="" authtime="40" dnstime="162" cattime="36265" avscantime="4939" fullreqtime="97458" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="43248" request="0x8898000" url="p.ebaystatic.com/.../19395_wide.jpg" referer="http://www.ebay.co.uk/" error="" authtime="40" dnstime="172" cattime="35639" avscantime="4670" fullreqtime="107020" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="56830" request="0xc1dc8000" url="p.ebaystatic.com/.../19394_wide_upd.jpg" referer="http://www.ebay.co.uk/" error="" authtime="40" dnstime="202" cattime="36388" avscantime="5834" fullreqtime="125370" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="82394" request="0x8899800" url="p.ebaystatic.com/.../19396_wide.jpg" referer="http://www.ebay.co.uk/" error="" authtime="40" dnstime="162" cattime="33515" avscantime="5426" fullreqtime="122454" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="45612" request="0x10291000" url="p.ebaystatic.com/.../19398_wide.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="36100" avscantime="4396" fullreqtime="67196" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.216" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="39955" request="0x889a000" url="p.ebaystatic.com/.../19399_wide.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="34104" avscantime="5262" fullreqtime="63557" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.73.89" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1150" request="0x103a3800" url="www.ebay.co.uk/favicon.ico" referer="" error="" authtime="0" dnstime="0" cattime="35605" avscantime="1015" fullreqtime="1885932" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/x-icon"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.62.221" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="190" request="0x8feb000" url="rover.ebay.co.uk/.../0 referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="40203" avscantime="2369" fullreqtime="1230915" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="181" reputation="neutral" categoryname="Marketing/Merchandising" application="ebay" app-id="134" content-type="text/plain"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="37.252.162.144" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="43" request="0xc19dd800" url="ib.adnxs.com/setuid referer="http://www.ebay.co.uk/" error="" authtime="46" dnstime="1349" cattime="32294" avscantime="1081" fullreqtime="133361" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="105" reputation="neutral" categoryname="Business" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.145" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="14" request="0x1138b800" url="www.msftncsi.com/ncsi.txt" referer="" error="" authtime="57" dnstime="1432" cattime="98" avscantime="1461" fullreqtime="42447" device="1" auth="2" ua="Microsoft NCSI" exceptions="" category="105" reputation="trusted" categoryname="Business" content-type="text/plain"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.138" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="10410" request="0x10a9f800" url="rtm.ebaystatic.com/.../2960_UK_Deals_HP_Fallback_BREC_300x130_Generic_Green.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="98" avscantime="2258" fullreqtime="2200636" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="" user="stephen" ad_domain="HUGHES" statuscode="200" cached="1" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="89199" request="0x1148e000" url="ssli1.ebayimg.com/134eab8d-3a9b-4450-8698-f96ed72eb027498246.jpg" referer="http://www.ebay.co.uk/" error="" authtime="50" dnstime="0" cattime="36033" avscantime="6857" fullreqtime="50744" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" content-type="image/jpeg"
    2016:02:01-12:24:57 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.138" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="57730" request="0xc1c58000" url="rtm.ebaystatic.com/.../2960_UK_Deals_HP_Fallback_MFBB_876x402_Generic_Yellow.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="158" avscantime="4221" fullreqtime="2185139" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:58 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="63354" request="0x10668800" url="ssli1.ebayimg.com/ae29352c-fc20-45e0-9b34-5942ee7b8dbd892136.jpg" referer="http://www.ebay.co.uk/" error="" authtime="45" dnstime="988" cattime="33750" avscantime="4000" fullreqtime="139702" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:58 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="87100" request="0x10ad5800" url="ssli1.ebayimg.com/1b9de06a-513b-4b79-b045-867020c92d79189067.jpg" referer="http://www.ebay.co.uk/" error="" authtime="64" dnstime="159" cattime="38933" avscantime="3885" fullreqtime="150177" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:24:58 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="66.211.189.115" user="stephen" ad_domain="HUGHES" statuscode="302" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="82" request="0xc19de000" url="velocity-cdn.ebaystratus.com/.../337c26d9edf1ce3b959885809204f0e2388c8099" referer="http://www.ebay.co.uk/" error="" authtime="61" dnstime="848" cattime="40792" avscantime="1725" fullreqtime="395633" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" content-type="text/plain"
    2016:02:01-12:24:58 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="66.211.189.115" user="stephen" ad_domain="HUGHES" statuscode="302" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="82" request="0x10ad5000" url="velocity-cdn.ebaystratus.com/.../1e512677977b42e579d9999713b258394d81f969" referer="http://www.ebay.co.uk/" error="" authtime="79" dnstime="1101" cattime="35943" avscantime="1745" fullreqtime="391677" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" content-type="text/plain"
    2016:02:01-12:24:58 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="66.211.189.115" user="stephen" ad_domain="HUGHES" statuscode="302" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="82" request="0x103a1000" url="velocity-cdn.ebaystratus.com/.../8985a0c9bb041c343a313deed1006e2b452631f9" referer="http://www.ebay.co.uk/" error="" authtime="45" dnstime="261" cattime="32568" avscantime="1533" fullreqtime="388923" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" content-type="text/plain"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.62.221" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="42" request="0x8feb000" url="rover.ebay.co.uk/.../9 referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="32849" avscantime="990" fullreqtime="5283031" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="181" reputation="neutral" categoryname="Marketing/Merchandising" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.73.89" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1736" request="0x103a3800" url="www.ebay.co.uk/.../collectionFlyout referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="36038" avscantime="7413" fullreqtime="5377255" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="text/xml"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="866" request="0x1141a800" url="i1.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="82" avscantime="1010" fullreqtime="6278674" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1140" request="0x10ad7800" url="i1.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="70" avscantime="1050" fullreqtime="6394374" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="2554" request="0x1037e000" url="i3.ebayimg.com/.../s-l200.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="81" avscantime="1236" fullreqtime="6157642" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1271" request="0xc19df000" url="i3.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="61" avscantime="1090" fullreqtime="6385712" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="13124" request="0x8fe9000" url="i3.ebayimg.com/.../s-l200.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="69" avscantime="2572" fullreqtime="6439795" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="5197" request="0xc2230000" url="i2.ebayimg.com/.../s-l200.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="35742" avscantime="1647" fullreqtime="5684199" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1115" request="0x10ad7800" url="i1.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="102" avscantime="1391" fullreqtime="38035" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1342" request="0x1141a800" url="i1.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="96" avscantime="1270" fullreqtime="46976" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1076" request="0x11421000" url="i.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="40096" avscantime="942" fullreqtime="6168073" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="5987" request="0x1014e800" url="i.ebayimg.com/.../s-l200.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="38020" avscantime="2183" fullreqtime="6145010" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1985" request="0xc236f800" url="i2.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="44622" avscantime="3424" fullreqtime="6082981" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1147" request="0xc205b800" url="i.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="35343" avscantime="1109" fullreqtime="6407959" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="4963" request="0x8b93000" url="i1.ebayimg.com/.../s-l200.jpg" referer="http://www.ebay.co.uk/" error="" authtime="65" dnstime="194" cattime="107" avscantime="2371" fullreqtime="61216" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1718" request="0x8899000" url="i1.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="47" dnstime="145" cattime="101" avscantime="1196" fullreqtime="59622" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="923" request="0xc1db6800" url="i3.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="40" dnstime="156" cattime="109" avscantime="1152" fullreqtime="53851" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1705" request="0x1087c000" url="i2.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="37800" avscantime="1290" fullreqtime="6460920" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1214" request="0x10a44800" url="i.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="35122" avscantime="1029" fullreqtime="6446794" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="3493" request="0xc2233000" url="i2.ebayimg.com/.../s-l200.jpg" referer="http://www.ebay.co.uk/" error="" authtime="44" dnstime="172" cattime="36173" avscantime="1571" fullreqtime="90364" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1178" request="0x1068b800" url="i.ebayimg.com/.../s-l80.jpg" referer="http://www.ebay.co.uk/" error="" authtime="48" dnstime="174" cattime="41398" avscantime="1080" fullreqtime="92972" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="4608" request="0x8764000" url="i.ebayimg.com/.../s-l200.jpg" referer="http://www.ebay.co.uk/" error="" authtime="42" dnstime="751" cattime="36103" avscantime="1793" fullreqtime="101037" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="unverified" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:02 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.67.54" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="11799" request="0x8b94000" url="i15.ebayimg.com/.../c4b3_1.JPG referer="http://www.ebay.co.uk/" error="" authtime="56" dnstime="1047" cattime="35252" avscantime="2857" fullreqtime="90498" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="trusted" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/jpeg"
    2016:02:01-12:25:03 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.217.9.134" user="" ad_domain="" statuscode="304" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x11391000" url="www.microsoft.com/.../MicSecSerCA2011_2011-10-18.crl" referer="" error="" authtime="0" dnstime="1030" cattime="0" avscantime="0" fullreqtime="67380" device="1" auth="2" ua="Microsoft-CryptoAPI/6.1" exceptions="av,auth,url,ssl,fileextension,size"
    2016:02:01-12:25:06 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="43" request="0x10290800" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="50" dnstime="189" cattime="77" avscantime="1400" fullreqtime="290048" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:06 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="43" request="0x10aa0000" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="47" dnstime="183" cattime="47" avscantime="1548" fullreqtime="293188" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:06 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="43" request="0xc1c58800" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="114" avscantime="1572" fullreqtime="9675468" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:08 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.137" user="" ad_domain="" statuscode="304" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x103f1000" url="crl.microsoft.com/.../tspca.crl" referer="" error="" authtime="0" dnstime="1433" cattime="0" avscantime="0" fullreqtime="37517" device="1" auth="2" ua="Microsoft-CryptoAPI/6.1" exceptions="av,auth,url,ssl,fileextension,size"
    2016:02:01-12:25:09 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="0" request="0xc1c58800" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="110" avscantime="1463" fullreqtime="3400612" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:09 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="0" request="0x10290800" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="62" avscantime="1413" fullreqtime="3470759" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:09 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.152" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="0" request="0x10aa0000" url="srx.uk.ebayrtm.com/rtm referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="90" avscantime="1346" fullreqtime="3476444" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="158" reputation="neutral" categoryname="Auctions/Classifieds" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:09 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.62.221" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="42" request="0x8feb000" url="rover.ebay.co.uk/.../9 referer="http://www.ebay.co.uk/" error="" authtime="0" dnstime="0" cattime="108" avscantime="1006" fullreqtime="6998281" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="181" reputation="neutral" categoryname="Marketing/Merchandising" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:09 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="23.195.62.221" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="42" request="0x10292000" url="rover.ebay.co.uk/.../9 referer="http://www.ebay.co.uk/" error="" authtime="44" dnstime="171" cattime="47" avscantime="970" fullreqtime="252583" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="181" reputation="neutral" categoryname="Marketing/Merchandising" application="ebay" app-id="134" content-type="image/gif"
    2016:02:01-12:25:12 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.137" user="" ad_domain="" statuscode="304" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x103f1000" url="crl.microsoft.com/.../MicRooCerAut2011_2011_03_22.crl" referer="" error="" authtime="0" dnstime="0" cattime="0" avscantime="0" fullreqtime="4577970" device="1" auth="2" ua="Microsoft-CryptoAPI/6.1" exceptions="av,auth,url,ssl,fileextension,size"
    2016:02:01-12:25:17 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="62.252.99.137" user="" ad_domain="" statuscode="304" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x103f1000" url="crl.microsoft.com/.../MicTimStaPCA_2010-07-01.crl" referer="" error="" authtime="0" dnstime="0" cattime="0" avscantime="0" fullreqtime="4601611" device="1" auth="2" ua="Microsoft-CryptoAPI/6.1" exceptions="av,auth,url,ssl,fileextension,size"
    2016:02:01-12:25:18 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="108248" request="0xc1db5800" url="https://www.facebook.com/" referer="intranet.hughesnetwork.co.uk/.../" error="" authtime="50" dnstime="0" cattime="94" avscantime="109731" fullreqtime="1506723" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/html"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="10064" request="0x1148c000" url="scontent.xx.fbcdn.net/.../12507614_1677753932481011_5366412962443923663_n.jpg referer="https://www.facebook.com/" error="" authtime="34" dnstime="0" cattime="45" avscantime="2573" fullreqtime="41512" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="618" request="0x10a45800" url="static.xx.fbcdn.net/.../TuG4YchV8kb.png" referer="https://www.facebook.com/" error="" authtime="44" dnstime="0" cattime="52" avscantime="964" fullreqtime="37085" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/png"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1773" request="0x1138a000" url="scontent.xx.fbcdn.net/.../12507512_10156327275485161_3667715733361769546_n.jpg referer="https://www.facebook.com/" error="" authtime="46" dnstime="0" cattime="94" avscantime="1076" fullreqtime="201738" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1957" request="0x1138a000" url="scontent.xx.fbcdn.net/.../12548881_977470605634639_3506838741241945190_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="83" avscantime="1142" fullreqtime="55141" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="10882" request="0x1148c000" url="scontent.xx.fbcdn.net/.../11222466_942589392468915_3437886042111740014_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="73" avscantime="2270" fullreqtime="170461" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="21469" request="0x10a45000" url="scontent.xx.fbcdn.net/.../12592709_988183211230045_1335150890815292974_n.jpg referer="https://www.facebook.com/" error="" authtime="45" dnstime="0" cattime="88" avscantime="4888" fullreqtime="191536" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="118" request="0x10667000" url="www.facebook.com/.../ referer="https://www.facebook.com/" error="" authtime="28" dnstime="0" cattime="89" avscantime="2651" fullreqtime="84317" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="593" request="0x10a45800" url="static.xx.fbcdn.net/.../FHkRvzxh4Tl.png" referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="99" avscantime="995" fullreqtime="424602" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/png"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="610" request="0xc1db4000" url="www.facebook.com/.../reconnect.php referer="https://www.facebook.com/" error="" authtime="30" dnstime="0" cattime="103" avscantime="4064" fullreqtime="87829" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="111" request="0x10666800" url="www.facebook.com/.../ referer="https://www.facebook.com/" error="" authtime="35" dnstime="0" cattime="87" avscantime="2842" fullreqtime="191183" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" reputation="neutral" application="facebook" app-id="147" category="195" reputation="neutral" categoryname="Social Networking" content-type="text/plain"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="158" request="0x10667000" url="www.facebook.com/.../bootstrap.php referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="107" avscantime="2575" fullreqtime="367886" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="158" request="0x103cc000" url="www.facebook.com/.../bootstrap.php referer="https://www.facebook.com/" error="" authtime="47" dnstime="0" cattime="94" avscantime="2436" fullreqtime="172035" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="2602" request="0x1028b000" url="www.facebook.com/.../ referer="https://www.facebook.com/" error="" authtime="38" dnstime="0" cattime="69" avscantime="6756" fullreqtime="355852" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" reputation="neutral" application="facebook" app-id="147" category="195" reputation="neutral" categoryname="Social Networking" content-type="text/plain"
    2016:02:01-12:25:19 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="208" request="0xc1db4000" url="www.facebook.com/xti.php referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="44" avscantime="3992" fullreqtime="442362" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/html"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1124" request="0x1148c000" url="scontent.xx.fbcdn.net/.../12642789_10154627681959465_3401941459863745195_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="70" avscantime="1032" fullreqtime="787230" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="109" request="0x10667000" url="www.facebook.com/.../imps_logging.php referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="37" avscantime="2924" fullreqtime="272756" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" application="facebook" app-id="147" category="195" reputation="neutral" categoryname="Social Networking" content-type="text/plain"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="67" request="0x10668000" url="pixel.facebook.com/.../ods_endpoint.php referer="https://www.facebook.com/" error="" authtime="32" dnstime="0" cattime="61" avscantime="1102" fullreqtime="71347" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="trusted" category="195" reputation="trusted" categoryname="Social Networking" application="facebook" app-id="147" content-type="image/png"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.1" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="22" request="0xc236e800" url="3-edge-chat.facebook.com/active_ping referer="https://www.facebook.com/" error="" authtime="66" dnstime="0" cattime="95" avscantime="1362" fullreqtime="139973" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="unverified" category="195" reputation="unverified" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1206" request="0x1138a000" url="scontent.xx.fbcdn.net/.../11219405_852197664848828_5530497306530774263_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="77" avscantime="1244" fullreqtime="913593" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="6355" request="0x103cc000" url="www.facebook.com/.../TickerEntStoryPagelet referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="61" avscantime="12960" fullreqtime="290545" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="109" request="0x10666800" url="www.facebook.com/.../resize referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="97" avscantime="3007" fullreqtime="519895" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" application="facebook" app-id="147" category="195" reputation="neutral" categoryname="Social Networking" content-type="text/plain"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="8" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="379" request="0x10a45800" url="static.xx.fbcdn.net/.../QmW1piAeOlQ.png" referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="88" avscantime="879" fullreqtime="619758" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/png"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="4713" request="0x1028b000" url="www.facebook.com/.../get.php referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="49" avscantime="7218" fullreqtime="222833" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" application="facebook" app-id="147" category="195" reputation="neutral" categoryname="Social Networking" content-type="text/plain"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1131" request="0x1138a000" url="scontent.xx.fbcdn.net/.../10406361_10204770316489677_1962098728598964763_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="109" avscantime="989" fullreqtime="138135" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1153" request="0x1148c000" url="scontent.xx.fbcdn.net/.../12509832_1226955697321716_1478786265562281970_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="87" avscantime="985" fullreqtime="180702" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1202" request="0x1028b800" url="scontent.xx.fbcdn.net/.../11988670_1078861298798825_4146551529258914616_n.jpg referer="https://www.facebook.com/" error="" authtime="45" dnstime="0" cattime="57" avscantime="943" fullreqtime="43345" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="25091" request="0x10667000" url="www.facebook.com/.../hovercard.php referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="97" avscantime="22696" fullreqtime="221929" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="195" reputation="neutral" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1109" request="0x10a45000" url="scontent.xx.fbcdn.net/.../11896025_872742036107001_8273777541375236721_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="89" avscantime="1034" fullreqtime="985506" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="14681" request="0x10a45000" url="scontent.xx.fbcdn.net/.../10411344_1678350025754735_4878587629735221938_n.png referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="101" avscantime="2606" fullreqtime="44490" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/png"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.93.7" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1169" request="0x1028b800" url="scontent.xx.fbcdn.net/.../1017200_477856605632812_1386815927_n.jpg referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="85" avscantime="1047" fullreqtime="162884" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" category="177" reputation="neutral" categoryname="Content Server" application="facebook" app-id="147" content-type="image/jpeg"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="10.0.2.13" dstip="31.13.64.36" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="111" request="0x10667000" url="www.facebook.com/.../bz" referer="https://www.facebook.com/" error="" authtime="0" dnstime="0" cattime="50" avscantime="3287" fullreqtime="273936" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="neutral" application="facebook" app-id="147" category="195" reputation="neutral" categoryname="Social Networking" content-type="text/plain"
    2016:02:01-12:25:20 sophos httpproxy[5658]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.2.13" dstip="31.13.64.1" user="stephen" ad_domain="HUGHES" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (Hughes Profile)" filteraction="REF_HttCffRestrUsers (Restricted Users)" size="1232" request="0xc236f000" url="3-edge-chat.facebook.com/pull referer="https://www.facebook.com/" error="" authtime="42" dnstime="0" cattime="45" avscantime="4827" fullreqtime="968042" device="1" auth="2" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" exceptions="" reputation="unverified" category="195" reputation="unverified" categoryname="Social Networking" application="facebook" app-id="147" content-type="text/plain"



    Cheers,
    Richard

  • What browser is in use? Is the Proxy in Standard or Transparent mode?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Apologies, completely forgot to mention what browser. This appears to happen with both Internet Explorer and Google Chrome. The proxy is setup in Transparent mode, but the last time this issue occurred, I set a GPO to tell clients to use a PAC file which has the proxy server details. This appears to have worked so far, not sure why Transparent mode has become intermittent for me though?
  • See community.sophos.com/.../46722 for an explaination of exactly how the transparent AD SSO works on the UTM. May give you a clue.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • Hi Scott,

    Transparent authentication used to work fine, it wasn't until I applied an update, where this problem began. When this issue occurs, there is no prompt for authentication. For example, if you try to visit a website after the UTM has been rebooted, you are sent straight to the "Category blocked" page when transparent with AD-SSO authentication is used. If I visit the eBay website when this issue occurs, for some reason, all web access is restored and the UTM magically detects the user. If I do not visit the eBay website, I will be presented with "Category blocked", where the logs will show a blank username, e.g. "".

    As I had mentioned in my previous post, it would appear that forcing clients to use a PAC file has in a way, resolved this issue. I would although, much prefer to have transparent authentication working again as it did previously.

    Regards,
    Richard
  • I can confirm such behaviour at one of my customers. Also transparent mode with AD-SSO (Authentication required is checked). We use profiles for AD-Groups and last web profile is block all action. Browser is ie.
    Problem appears if user starts the computer in the morning and if e.g. www.google.de is the browser start page -> in this case there will additionaly be a https cert error (because of the redirection to https://www.google.de)
    Https traffic is not scanned by the webproxy (only filtering)!

    If you look at the logs user is empty-> " "

    So the user gets an UTM error page ->block all action
    If you use the webproxy policy checker for the user all seems to be fine.

    If the user is loading an other webpage than the start page, authentication will work fine now and also the website loads normally...-> also google.de works now.


    I've got the feeling that if you uncheck the "automatic search of the proxy configuration" in ie it will work normally but I'm not really sure about that...


    I'll check if problem still persists after 9.353-4 Update... (customer is on 9.351-3)

    regards

  • I think SWeissflog has it right. Don't let IE 'Automatically detect settings.' My guess is that IE goes into Proxy mode when it requests certain sites and that the authentication is then handled in Standard mode just as it is when clients use your PAC file.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Since "automatically detect" is the default for I.E (and other browsers also use IE's settings) the easiest would be create option 252 in your DHCP scope with the url to the wpad or pac file. No client changes needed. Then the "automatically detect settings" becomes exactly what you want. Regardless of what network they're on, road warrior won't get the DHCP option and his automatically detect will allow his browser to surf the internet at home without a proxy. Users in the office will get the DHCP option and be forced through the proxy. You can then use group policy to prevent users from making browser proxy changes, thus leaving it always "automatically detect"

    All of this works perfect for me since my UTM implementation.

  • Agreed, rsenio - I'm also a fan of Standard mode in the office.  Some folks just want to use Transparent though.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA