How do I authorize a website to avoid Web Protection scanning when endpoints have problems?

  • Article ID: 111431
  • Updated: 21 Feb 2013

This article describes how to make a website authorization to stop a website from being scanned by web protection, this can be a necessary step if the website does not load correctly.

This should be used as a temporary solution before raising an issue with Sophos Support.

Known to apply to the following Sophos product(s) and version(s)

Sophos Anti-Virus for Windows 2000+ 9.7.8
Sophos Anti-Virus for Windows 2000+ 10.2.4
Sophos Anti-Virus for Windows 2000+ 10.0.10

What To Do

Note: In order to perform a complete authorization, both the domain and IP must be authorized. Most websites can be accessed in both ways.

From Enterprise Console

  1. Open Enterprise Console.
  2. Navigate the to appropriate 'Anti-virus and HIPS' policy under Policies, and double click to edit.
  3. Click on 'Authorization...' and select the 'Websites' tab.
  4. Click 'Add' to place in an entry in one of the following formats:
    • Domain name
    • IP address with subnet mask
    • IP address
Note: Wildcards are not supported.

From Sophos Anti-Virus

  1. Open Sophos Anti-Virus, by right clicking on the Sophos shield in the system tray and selecting 'Open Sophos Endpoint Security and Control'
  2. Click 'Configure anti-virus and HIPS' then click 'Authorization'
  3. Select the 'Websites' tab
  4. Click 'Add' to place in an entry in one of the following formats:
    • Domain name
    • IP address with subnet mask
    • IP address
Note: Wildcards are not supported.

Additional troubleshooting

Some internal websites based on web applications (or other web technologies) will perform loop-back connections, this connection occurs on IP 127.0.0.1. As an additional troubleshooting step, adding this as an IP authorization may allow the endpoints regular access to a website. 

Note: This is only recommended as a short term workaround in cases, as all site authorizations will drop your protection level.

Information for Sophos Support

  • Use Problem Steps Recorder to demonstrate the problem.
  • Detail if more than one browser is affected, information no on version is also useful.
  • Can the site be accessed by Sophos Support for testing?
  • Is the problem resolved by disabling all Web Protection features (After a restart on the endpoint)?

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments