Sophos reports that a website is blocked or has access restricted

  • Article ID: 119440
  • Rating:
  • 21 customers rated this article 2.8 out of 6
  • Updated: 15 Jul 2014

There are two main sets of circumstances under which Sophos will block a URL. (Be aware that the actual message displayed will vary according to the browser you are using and the site you are attempting to access):

  • Sophos Endpoint Security detects malware on a website, blocks access to it, and a message similar to the following is displayed in the browser:

    Blocked Request: Restricted site, File contains malicious code.
    This is usually followed by the <Threat name>.

  • Sophos Web Control which is included in your product suite indicates that the site is inappropriate, based on the policies set up by your company administrator . A message similar to the following is displayed in the browser:

    Blocked Request: Restricted site,  
    This usually indicates which category the site has been classified as, followed by the <Threat source URL>  

for example:

or

If it is your opinion that the site alert is incorrect, follow the steps in the 'What to do' section below, to get the site checked, or to get a reassessment.

Applies to the following Sophos product(s) and version(s)


Sophos Web Appliance Virtual
Sophos Web Appliance
Sophos UTM
Sophos Security Management Appliance
Sophos Anti-Virus for Windows 2000+
Sophos Anti-Virus for Mac OS X

What action should you take?

Sophos indicates that a site contains malware:

If you believe that the URL has been blocked on the basis of hosting malware, but you think this is a false positive, go to the reassessment request form: https://www.sophos.com/en-us/threat-center/reassessment-request.aspx to submit a request to Sophos to reassess the site. Ensure that you complete all the fields.

If you are not a Sophos customer, (i.e. someone else has informed you that Sophos has blocked your site) please try and find out which Sophos product was alerting on the site, as this will allow us to investigate your query more quickly. If you really cannot get this information, please enter a best guess in the mandatory field 'Product'. (Sophos Anti-Virus comes under the heading of 'Endpoint Security and Control'.)

Note: Submitted categorization requests will be reviewed, and re-classified as quickly as possible, though it may take up to 5 business days once a site is re-classified, for it to be available on your Sophos product.

Sophos indicates that a site is restricted/inappropriate:

If you believe that the URL has been incorrectly restricted or blocked, do one of the following:

  • If you work for an organisation that runs Sophos products, and you are not the Sophos administrator, you should discuss this issue with your Sophos administrator.
  • If you work for an organisation that runs Sophos products and you are the Sophos administrator:

    • If the site is flagged as inappropriate check that you have correctly configured the Sophos web control policies according to the requirements of your organisation.
    • If your policy is correct, but you think that the site is incorrectly classified, click on this link https://www.sophos.com/en-us/threat-center/reassessment-request.aspx  to submit a request to Sophos to review the classification of the site.

    For more information on these points, refer to How to: Understand Web Control policy.

Note:

When you submit a categorization request it will be reviewed and re-classified as quickly as possible, though it may take up to 5 business days once a site is re-classified, for it to be available on your Sophos product.

Further information

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments