topic Re: What's going on with 7.1.4-h2 OS? in General Topics

What's going on with 7.1.4-h2 OS?

mikealanni — Mon, 19 Sep 2016 16:41:58 GMT

Hi,

I think something not right with behavior changes on the release 7.1 with application defaults.

Now my firewall blocking Sophos clients from communicating with my remote Sophos servers

Sophos uses standard ports but look the firewall cannot catch the application ID and catching it as SSL on the port 8192/8194 and that make it not matching with my general rule on application default.

Any idea how we solve this? do I need to create rule for each software my client using? (Really)

Re: What's going on with 7.1.4-h2 OS?

BPry — Mon, 19 Sep 2016 19:02:21 GMT

Generally you would just create a custom application ID. Since you already know the IP addresses and the ports that they are going to that would be the route that I would take if you are blocking traffic on non-standard ports. Shouldn't take more than a few minutes per custom application.

Re: What's going on with 7.1.4-h2 OS?

mikealanni — Mon, 19 Sep 2016 21:26:48 GMT

Any application using SSL its not going to match the application default if it is not using 443. so far IMAP, secure SMTP, Sophos .. etc are been blocked by the default interzone rule. changing the general rule from application default to any that fix the problem but open all ports.

Re: What's going on with 7.1.4-h2 OS?

TranceforLife — Mon, 19 Sep 2016 21:57:42 GMT

Hi,

So anyway when you changing your rule to "any" as a service the Sophos app still identified as SSL not actually sophos-rms?

Can you upload manually app database and reinstall it or revert back to the previous version and see if this will make a difference.

Thx,

Myky