This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection problem for a customer web portal

Hi everyone,

I have problem for one connection to a customer portal. If I try to connect to this website outside my organization I can connect, in my organization with a XG Firewall v.18.0.4 I cannot.

If I try to put my pc in a Firewall Rule that permitt to have all the connection without any restriction, I cannot connect.

I try to add this website in a Excpetion, but this doesn't work.

Can anyone tell me how I can check why this website is blocked on my XG Firewall?

Thanks

This thread was automatically locked due to age.

Parents

0 MayurMakvana over 3 years ago

Hi Marco!

Thank you for contacting Sophos Community!

Can you please help us with the URL you are trying access ?

Is it resolving the proper DNS?

If yes, collect the tcpdump and drop from CLI of the firewall:

console>tcpdump ' host (destinationURLIP)

console>drop ' host (destinationURLIP)

Mayur Makvana| Technical Account Manager

If a post solves your question use the 'Verify Answer' button.

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MayurMakvana over 3 years ago

Hi Marco!

Thank you for contacting Sophos Community!

Can you please help us with the URL you are trying access ?

Is it resolving the proper DNS?

If yes, collect the tcpdump and drop from CLI of the firewall:

console>tcpdump ' host (destinationURLIP)

console>drop ' host (destinationURLIP)

Mayur Makvana| Technical Account Manager

If a post solves your question use the 'Verify Answer' button.

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Marco Orfei over 3 years ago in reply to MayurMakvana

Hi Mayur,

thanks for your reply.

With the tcpdump I see the capture packet to the destination ip, but my browser doesn't show me the destination website.

The URL is: https://gw.tupras.com.tr:80/sap/bc/ui5_ui5/sap/zlys/index.html?sapclient=001&sap-ui-language=EN&sap-ui-appcache=false
Cancel
Vote Up 0 Vote Down

Cancel
0 Vishal_R over 3 years ago in reply to Marco Orfei

Hi Marco Orfei : Is it possible to see the status by stopping IPS service for a while and confirm is it working or not with IPS off?

If status is same with stopping IPS then TCPDUMP, drop and PCAP will be helpful to have further identification on issue or you may log a support case for investigation on same.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marco Orfei over 3 years ago in reply to Vishal_R

Hi, without IPS the website doesn't be reached
Cancel
Vote Up 0 Vote Down

Cancel