Sophos XG with BTLS ISL Light client

[Techie2000]

Hi, We've recently got ourselves a Sophos XG but have run into a couple of issues with BT Lancashire's ISL client refusing to connect.

 

We've added an HTTPS decryption exception for the hostname ^([A-Za-z0-9.-]*\.)?btlancashire\.co.uk/ but without any luck.

 

Randomly, we added the same exception for ^[A-Za-z0-9.-]*\.islonline.net and tried their ISL Tester and it connected with 'Network OK.'

 

Has anyone run into this issue or got any suggestions?

 

Many thanks in advance.

[Blue_Cookeh]

Have you used the Log Viewer on the Sophos XG with a filter for a test client's IP? This should tell you exactly what is being blocked and by which firewall rules.

[Techie2000]

I have and randomly nothing is blocked or being filtered

 

This makes me think it is a certificate issue, but the HTTPS decryption exception should have resolved this. Randomly when tested on our old firewall, it works without any changes required!

[synaesthesia]

Have you tried without the regex? I'm finding the XG a bit picky with wildcards etc; so where it seems to work fine with regex queries where needed, if they're not needed (i.e. for a whole domain) just the domain name on it's own seems to do the trick!

[LukeC]

Check your ports to we had to make changes to our filtering we use xgs and sgs this guide may help https://help.islonline.com/19142/161686