NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

JohanHolmberg's avatar
Oct 09, 2020
Solved

[site blocked: ocsp2.globalsign.com] on SRR60

Hi!

I get [site blocked: ocsp2.globalsign.com] in my logfiles, preventing me to get access to services when using e.g. appltv and different apps. Also blocking other services like scrive.

I've read some threads about simular problems but havn't found a solution that works. 

There is one tip about adding https service in "Blocked services" but that seams for me to do the opposite of what I want to achive? 

I use block keywords but I have checked more then once that the blocked (but good sites) havn't the blocked keyword in the URL.

 

Any ideas where I can find more info about this or a solution?

 

Netgear Orbi Pro AC3000 (SRR60, SRS60) with FW 2.5.3.110

  • JohanHolmberg's avatar
    JohanHolmberg
    Oct 18, 2020

    After I sent my log files I got the suggestion to remove the word "sex" from the "blocked keywords" list. After doing that I now don't experience any blocked sites. 

     

    Thank you BruceGuo for quick feedback and solution.

     

    //Johan

11 Replies

  • schumaku's avatar
    schumaku
    Guru - Experienced User

    Blocking ocsp2.globalsign.com will break the revocation status check by OCSP* of any https certificates signed by GlobalSign, and probably even more private PKIs making use of the GlobalSign OCSP service, so many https sites (and APIs or whatever cloud connectivity) will simply blocked or lowered in the security, too.

     

    *Online Certificate Status Protocol (OCSP) is the Internet protocol used for obtaining the revocation status of an X.509 digital certificate.

     

    No idea why Orbi Pro should block this site - considering there is no crappy Internet security stuff in the play - just on it's own.

     

    Have any URLs in the blocking list on your Orbi Pro router?

     

     

    • JohanHolmberg's avatar
      JohanHolmberg
      Guide

      Yes, that's my point - donno why they get blocked, feels random. I can see they get access from other local IP numbers. Looks like it's from apps on Apple TV that sometimes get blocked.

       

      [site blocked: mailgun.scrive.com]

      [site blocked: ocsp2.globalsign.com]

      [site blocked: ocsp.int-x3.letsencrypt.org]

       

      • schumaku's avatar
        schumaku
        Guru - Experienced User

        JohanHolmberg wrote:

        Yes, that's my point - donno why they get blocked, feels random.


        More than that - just silly to block these... But then again, I still don't understand what exactly is blocking this - considering there are no crazy Internet Security "packages" on the Orbi Pro. BruceGuo 

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More