Vagabound  Freshman Member

Thank you very much for your comments. Then I'm reassured, but it's strange that this is happening so often right now, it seems as if YouTube has changed something. 🤨

@Zyxel_Kevin Thank you very much for your support. It seems to work! Best regards Vagabound

Here is the same procedure every month on Windows Patchday with a USG Flex 200. It is getting tedious to feed the white list every month.

I can only agree with this, I will be careful not to white list any IP address that I can't verify.

I had previously also a USG 110, but never had such problems as now with the USG Flex 200. Let's hope that this improves in the future, have no desire to constantly evaluate the many alerts, there are other things you should do.

Virus Hash: 927acfcba3f91bcf10264dde216d5ec9

Here is an excerpt from the SecuReporter:

Dozens of alerts again this morning: Message 1 2023-02-02 06:57:57 93.184.221.240:80 crit anti-virus FILE DESTROY Virus infected SSI:N Type:Anti-Malware Cache Virus:Malicious Virus File:powershell-7.3.2-win-x64_70b4b049d70b8ace7ec828ea395f25d9927b2e Protocol:HTTP :/

Thanks for the feedback and their clarification.

Here the same problem with USG Flex 200 with firmware V5.35.

I was able to update a PC today and it worked fine without any alerts in the logfile. =) Let's see how it looks like on the February patchday.

I do not see this function on the USG Flex 200 (firmware version 5.35). Will this still be added or is the support only for the ATP series?

Thank you for your cooperation. The firewall is restarted daily, so the local cache should be empty now. We can test the whole thing only with the February patchday, because all systems are already updated with us, from then we know more exactly.

Thank you for your feedback. Very strange, no URL threat filter version is displayed for me. Looks like the image below for me:

Despite firmware update to version V5.35 (ABUI.0), today again two messages in the logfile -> alert -> url-threat-filter -> ACCESS BLOCK -> ocsp.pki.goog -> Malicious Sites. :'(