https://account.network-auth.com Meraki Authentication Guest account portal blocked by Sophos

[Scorpius]

I am setting up a Guest Wifi with Meraki Authentication. However, when I create accounts, users cannot go to https://account.network-auth.com to change their passwords because Sophos Endpoint blocks the website as insecure. This is the message I receive:

High Risk Website Blocked

• Location: account.network-auth.com

• Access has been blocked as the threat Mal/HTMLGen-A has been found on this website.

Any thoughts?

[Adam]

Are you using Sophos internally or found that some of your clients are being blocked?

May be worth Meraki getting that domain whitelisted if it is what they use for their guest auth.

https://www.sophos.com/en-us/solutions/initiatives/threat-prevention.aspx

[DCooper · Accepted solution]

Sophos doesn't do a great job with web reputation. Most companies OEM webroot-brightcloud or other companies, as you can see with other companies lookup tool that website looks fine. You may need to just input a white list or notify Sophos they are classifying incorrectly.

http://beta.brightcloud.com/tools/url-ip-lookup.php

https://global.sitesafety.trendmicro.com/result.php

[Scorpius]

Thanks, guys, I'll look into the whitelist. I wanted to make sure that it wasn't a universal problem.

[Adam]

No issues with that domain and OpenDNS Umbrella either.