This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sharepoint 2010 - Skip Filter Rules

Hello -

Sophos newbie here. I am using the WAF with a SharePoint 2010 server that hosts some web forms. The WAF labeled the form as a false positive and I had to add multiple rules to the Skip Filter Rules in the Firewall Profile - Rules 973300,981173,981176,981204,and 981318 to get the web app working.

Just wondering if this is normal with SharePoint? Is there a list of rules to disable for SharePoint to work available?

Or, is this the alternative to disabling rules in the firewall profile?
https://www.sophos.com/en-us/support/knowledgebase/120549.aspx

Thanks!

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

Just wondering if this is normal with SharePoint?
It can be. Depends on the page content and coding. Many false positives are going to be situationally specific for a site and change over time as Sharepoint is updated, page content changes, and as WAF rules are added and depricated. Sophos uses an open source ruleset, which isn't specifically tested against Sharepoint or any other CRM.

Is there a list of rules to disable for SharePoint to work available?
Not one provided by Sophos (see above).

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 JamesBrown over 9 years ago

Thanks for the info. I appreciate it.
- James
Cancel
Vote Up 0 Vote Down

Cancel