Certain .edu sites "are blocked due to Trojan" - browser extension

[security210]

The following websites are incorrectly being blocked "due to a Trojan". Please verify that these are false positives.

www.suny.edu

www.binghamton.edu

mycollege.sunybroome.edu

 

[JPopovic]

Hello @security210,

Would you be able to provide a log or a screenshot showing that these domains are being blocked?

Thank you in advance!

[security210]

They were blocked this morning, and I confirmed this error myself. I'm unable to reproduce the message now.

I received a report from another user in my organization that they were also experiencing this issue. I've copied the only screenshot I have, but the user reported this happening on suny.edu and other educational websites as well. 

 

 

[JPopovic]

Could you please check these domains again, because I don't see that we are blocking them?

When you check them again please provide a log or a screenshot.

Thank you!

[security210]

I am no longer able to reproduce the errors, but I do see the detections in the logs. I don't have any "allowed websites" configured on my "allow list", so anything I whitelisted was temporary. The logs contain too much private information to upload in their entirety, but here are some relevant screenshots. 

 

 

[JPopovic]

I will alert the proper team to investigate.

Thank you

@gonzo

[gonzo]

This error occurred Sunday evening, and was fixed by 12:15am (EST) Monday.  Anyone encountering the error after that time was getting it because their Browser Guard databases had not yet updated.  Seeing it in your logs and not being able to reproduce the error now makes perfect sense, as your databases have updated after you encountered the error earlier.

I will close this thread, so that any other users who encounter this can be handled as potentially separate issues.