Online Grammar Checker - Issue

Question

Hi all, 
 We have a pair of SG450 UTM Appliances (Firmware version 9.405-5) running in Hot Standby Mode. 
 We have several users attempting to access a site ( https://www.grammarly.com ). This site allows the upload of passages of text to be checked for grammar etc. However, after logging on to the site an error message is shown which states: 
 "Your network configuration blocks Grammarly services on this computer. To troubleshoot this issue, click here" 
 Clicking 'here' opens a link to a diagnostic test between the user PC and the site itself. 
 A screenshot of the result is shown below: 
 
 I cannot see anything in the logs to indicate what the issue may be here and was wondering if anyone has encountered something like this. 
 Many thanks for your time and assistance in this matter. 
 John P

isoffice · Answer

Hi all, 
 Just a quick update. I referred this issue to Sophos who advised me to bypass the UTM for the site concerned to ensure that it was indeed the UTM that was the problem here. 
 Not surprisingly, when I reverted to our old Microsoft TMG 2010 to access the site, everything worked OK. 
 I believe it to be websocket issue and have seen on several posts in this forum that other users have had issues similar to this (I won't expose my ignorance on the topic of websockets at this particular time though). Also I have seen a Feature Request with 700+ votes to get the UTM to handle websockets. As of yet Sophos haven't indicated if they are going to address this particular problem. 
 In the end I had to disable SSL Scanning for the site in question and all appears to be working fine now. Not my ideal solution, but in the absence of anything from Sophos, will have to do. 
 Best regards, 
 John P

DouglasFoster · Answer

Given the number of 407 errors, I conclude the following: 
 
 The website is downloading some sort of plug-in, which is why it needs websockets. 
 The plug-in is unable to pass NTLM authentication. 
 The proxy keeps asking for credentials, and gets no response, so it never lets the traffic through. 
 
 Try creating an exception object to bypass authentication for these destinations, remove the more permissive exceptions, and try again.

AntoshDyade · Answer

For me, it works 
 I have added new exception WEB->Exception->Add New Exception