Sophos XGS - Invalid Traffic for certain domain

[Olliedawg]

Trying to access the site : http://www.brownsbfs.co.uk

 

I can see in the firewall logs that the IP related to that domain gets denied - logged as "Invalid Traffic" - Could not associate packet to any connection.

 

This is the same for student, staff & also tried on a clientless user, still the same. Tried adding the site to the exceptions list, still the same.

 

Any ideas? The site works on my mobile using 5G, however it is very slow to initially load!

[Wave9_Lee]

Trying to access the site : www.brownsbfs.co.uk

 

I can see in the firewall logs that the IP related to that domain gets denied - logged as "Invalid Traffic" - Could not associate packet to any connection.

 

This is the same for student, staff & also tried on a clientless user, still the same. Tried adding the site to the exceptions list, still the same.

 

Any ideas? The site works on my mobile using 5G, however it is very slow to initially load!

 

Hi try;

 

 

• Create a temporary firewall rule for your test machine IP address and attach a web policy to it
  
• Are you using the web proxy, or the DPI engine? Try the opposite to whatever you're using (tick 'Use Web Proxy instead of DPI engine', or untick it, under the Web Filtering part of your firewall rule).
  
• Ensure that jackets.dmmserver.com is being allowed and not blocked erroneously
  

 

Could be a rogue cdn or somesuch.

 

we had it with a couple of customers, but now works (without us doing anything) and works on our work test machines etc..

[Olliedawg]

Hi try;

 

 

• Create a temporary firewall rule for your test machine IP address and attach a web policy to it
  
• Are you using the web proxy, or the DPI engine? Try the opposite to whatever you're using (tick 'Use Web Proxy instead of DPI engine', or untick it, under the Web Filtering part of your firewall rule).
  
• Ensure that jackets.dmmserver.com is being allowed and not blocked erroneously
  

 

Could be a rogue cdn or somesuch.

 

we had it with a couple of customers, but now works (without us doing anything) and works on our work test machines etc..

 

Hi Lee,

 

Our XGS is with yourselves! I did submit a ticket as well as posting here. Ticket was resolved in the end! I believe it was Alistair who helped me

 

It turned out to be a combination of an ISP issue & the domain " jackets.dmmserver.com " being blocked!

[Wave9_Lee]

ahh sorry - late to the party as usual...

[Olliedawg]

ahh sorry - late to the party as usual...

 

Better late than never:cool: