topic Not Blocking EICAR June/2020 in General Topics

Not Blocking EICAR June/2020

nextgenhappines — Fri, 12 Jun 2020 22:45:39 GMT

PA220, running 8281-6129

If I go to https://www.eicar.org/?page_id=3950 and try download test files using http, the firewall is not blocking of the download.

If I go to the old site, http://2016.eicar.org/85-0-Download.html , the firewall will block it.

Re: Not Blocking EICAR June/2020

ShaiW — Sun, 14 Jun 2020 12:53:19 GMT

Hi @nextgenhappines

It is NOT the firewall's fault here, I tested the HTTP download link it on my PC and in my browser's developer view I can see the download process starting with the correct link:

but getting a 301 code redirecting to https://www.eicar.org/download/eicar.com so the actual download is over https.

To confirm, I enabled SSL decryption on my test PC and it blocked the eicar download successfully.

Shai

Re: Not Blocking EICAR June/2020

nextgenhappines — Sun, 14 Jun 2020 13:30:29 GMT

ah.. okay.. thanks for debugging it...