For anyone using the Sophos Web Protection Content Filter, you should make the following change to the regular expressions in the "Sophos Services[Allow Sophos Services]" exception list.
Change these:
^https?://.*\.sophosupd\.com/
^https?://.*\.sophosupd\.net/
^https?://.*\.sophosxl\.net/
To these:
^https?://[A-Za-z0-9.-]*\.sophosupd\.com/
^https?://[A-Za-z0-9.-]*\.sophosupd\.net/
^https?://[A-Za-z0-9.-]*\.sophosxl\.net/
According to Sophos support, the previous format they used is overloading the Http proxy service and will cause it to crash and send you this alert: "[INFO-141] Http proxy not running - restarted". The services will usually be restarted automatically, but it will cause an annoying blip for any traffic that is set to go through the content filter. Sophos is aware of this issue but not sure if they plan to patch or not. Either way the above should resolve it. If you have more interest in understanding regex and use with the Sophos content filter, stay tuned. I'll be adding a post that goes a little more in depth into regex; breaking down the syntax and sharing some practical examples to use in your exception lists.
