Skip to main content
ISOffice
New Member
April 26, 2018
Solved

Sophos Update Being Blocked?

  • April 26, 2018
  • 2 replies
  • 12641 views

Hi all,

 

We have 2 X 100D Hardware Appliances running firmware version 6.0.0 (build 0076 GA) in NAT (Flow-based) Mode (HA: Active-Passive). They are deployed as perimeter firewalls for our wireless network.

During a daily check on the appliances this morning, I found that they were blocking access (using the Web Filter mechanism) to a couple of sites that I believe are used by client devices on our wireless network to update their Sophos Anti-Virus software.

The web filter on the firewalls appears to be incorrectly categorising d1.sophosupd.com & d2.sophosupd.com as 'Malicious Websites'.

I created a Static URL Filter on each of our Web Filter Profiles to exempt *sophosupd.com and this seems to have rectified the issue for the time being, but I'm wondering if anyone else has had a similar experience. Further analysis of logs indicate that this began at approximately 12.00pm (GMT) yesterday (25/04/2018).

Any input would be much appreciated.

Best regards,

 

John P

    Best answer by rwpatterson

    Report these sites for Fortinet to have them re-categorized. They are very responsive. Last time I did this it was way under the 24 hours they ask you to wait before I saw the change.

    2 replies

    rwpatterson
    New Member
    April 26, 2018

    Report these sites for Fortinet to have them re-categorized. They are very responsive. Last time I did this it was way under the 24 hours they ask you to wait before I saw the change.

    ISOffice
    ISOfficeAuthor
    New Member
    April 26, 2018

    Hi Bob,

    Thank you for your prompt and helpful reply. I have submitted the offending URLs to Fortinet to get re-classified.

    Best regards,

    John P

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!