There are two main sets of circumstances under which Sophos will block a URL. (Be aware that the actual message displayed will vary according to the browser you are using and the site you are attempting to access):
- Sophos Endpoint Security detects malware on a website, blocks access to it, and a message similar to the following is displayed in the browser:
Blocked Request: Restricted site, File contains malicious code.
This is usually followed by the <Threat name>.
- Sophos Web Control which is included in your product suite indicates that the site is inappropriate, based on the policies set up by your company administrator . A message similar to the following is displayed in the browser:
Blocked Request: Restricted site,
This usually indicates which category the site has been classified as, followed by the <Threat source URL>
If it is your opinion that the site alert is incorrect, follow the steps in the 'What to do' section below, to get the site checked, or to get a reassessment.
Applies to the following Sophos product(s) and version(s)
Sophos Web Appliance Virtual
Sophos Web Appliance
Sophos Security Management Appliance
Sophos Anti-Virus for Windows 2000+
Sophos Anti-Virus for Mac OS X
What action should you take?
Sophos indicates that a site contains malware
If you believe that the URL has been blocked on the basis of hosting malware, but you think this is a false positive, submit a request to Sophos to reassess the site. Ensure that you complete all the fields. See the section below How to submit a web address URL for reassessment.
If you are not a Sophos customer, (i.e., someone else has informed you that Sophos has blocked your site) please try and find out which Sophos product was alerting on the site, as this will allow us to investigate your query more quickly. If you really cannot get this information, please enter a best guess in the mandatory field 'Product'. (Sophos Anti-Virus comes under the heading of 'Endpoint Security and Control'.)
Note: Submitted categorization requests will be reviewed, and re-classified as quickly as possible, though it may take up to 5 business days once a site is re-classified, for it to be available on your Sophos product.
Sophos indicates that a site is restricted/inappropriate
If you believe that the URL has been incorrectly restricted or blocked, do one of the following:
How to submit a web address URL for reassessment
To access the form go to the Technical Support contact page and select 'Submit a Sample' > 'Web address (URL)'. Example:
Note: When you submit a categorization request it will be reviewed and re-classified as quickly as possible, though it may take up to 5 business days once a site is re-classified, for it to be available on your Sophos product.