Sony Catalyst video software - Zenarmor blocking conflict

[Greg_E]

I recently updated some of the Sony Catalyst video software and needed to sign in to make it go... I found that many sites were blocked and had to create exceptions. I did not report these back to Zenarmor because the number of people using this software and using OPNsense is probably very small. But I wanted to make note of it just in case someone contacts you because they are having a problem.

The software is located here https://creatorscloud.sony.net/catalog/en-us/catalyst/index.html and we are specifically using the Catalyst Browse application. In order to log in, I had to exclude the following domains, and you'll see why I didn't report this through the interface:

exelator.com
playstation.com
playstation.net
sonyentertainmentnetwork.com

They have all of their user account info tied into the Playstation network, so if you block gaming (which I do), then you may run into this problem. I was able to recover my old account and get the software registered after opening those domains.

Again, I don't think this will be a big enough problem for a global change, but something I thought was worth noting to file away in a KB article somewhere for "just in case" someone has an issue.

[sy]

Hi,

Thanks for reporting the issue. Can you share the Block message column value for related domain?

[Greg_E]

They all show up in the gaming category which I block because our students don't need to be gaming on our computers.

This was for id.sonyentertainmentnetwork.com

Code Select Expand

[{"id":"transport_proto","name":"Protocol","value":"TCP","type":""},{"id":"policyid","name":"Policy","value":"0","type":""},{"id":"cloud_policyid","name":"Cloud Policy","value":"null","type":""},{"id":"interface","name":"Interface","value":"igb3","type":""},{"id":"vlanid","name":"VLAN","value":"0","type":""},{"id":"conn_uuid","name":"Connection UUID","value":"5cfda424-7905-494e-8c25-35e260a9ddbc","type":""},{"id":"direction","name":"direction","value":"out","type":""},{"id":"src_hwaddr","name":"Source Hardware Address","value":"40b0341f3844","type":""},{"id":"src_username","name":"Source username","value":"","type":""},{"id":"ip_src_saddr","name":"Source IP","value":"172.17.3.56","type":""},{"id":"ip_src_port","name":"Source port","value":62110,"type":""},{"id":"src_hostname","name":"Source hostname","value":"172.17.3.56","type":""},{"id":"src_dir","name":"Source direction","value":"EGRESS","type":""},{"id":"dst_hwaddr","name":"Destination Hardware Address","value":"a0369fec9e17","type":""},{"id":"dst_username","name":"Destination username","value":"","type":""},{"id":"ip_dst_saddr","name":"Destination IP","value":"23.34.240.152","type":""},{"id":"ip_dst_port","name":"Destination port","value":443,"type":""},{"id":"dst_hostname","name":"Destination hostname","value":"id.sonyentertainmentnetwork.com","type":""},{"id":"dst_dir","name":"Destination direction","value":"INGRESS","type":""},{"id":"is_blocked","name":"Block status","value":1,"type":""},{"id":"is_local","name":"Local","value":0,"type":""},{"id":"input","name":"Input","value":17,"type":""},{"id":"output","name":"Output","value":17,"type":""},{"id":"src_npackets","name":"Packets Outbound","value":2,"type":""},{"id":"src_nbytes","name":"Bytes Outbound","value":625,"type":""},{"id":"src_pbytes","name":"Source bytes","value":517,"type":""},{"id":"dst_npackets","name":"Packets Inbound","value":0,"type":""},{"id":"dst_nbytes","name":"Bytes Inbound","value":0,"type":""},{"id":"dst_pbytes","name":"Destination bytes","value":0,"type":""},{"id":"src_tcp_flags","name":"Source TCP Flags","value":"","type":""},{"id":"dst_tcp_flags","name":"Destination TCP Flag","value":"AP","type":""},{"id":"start_time","name":"Start time","value":"May 31, 2024 10:22 AM","type":"timestamp"},{"id":"end_time","name":"End time","value":"May 31, 2024 10:22 AM","type":"timestamp"},{"id":"encryption","name":"Encryption","value":"TLS-Encrypted","type":""},{"id":"app_id","name":"Application Id","value":11127,"type":""},{"id":"app_proto","name":"Application protocol","value":"HTTPS","type":""},{"id":"app_name","name":"Application","value":"Playstation Games","type":""},{"id":"app_category","name":"Application category","value":"Gaming","type":""},{"id":"tags","name":"Tags","value":"[\"Entertainment\",\"Encrypted\",\"SSL\",\"SSL V3\",\"Web Browsing\"]","type":"array"},{"id":"security_tags","name":"Security category","value":"[]","type":"array"},{"id":"web_actions","name":"Web Actions","value":"[]","type":"array"},{"id":"web_actions_description","name":"Web Actions Description","value":"[]","type":"array"},{"id":"src_geoip","name":"Source Geo IP","value":"{\"timezone\":\"\",\"continent_code\":\"\",\"city_name\":\"\",\"country_name\":\"\",\"country_code2\":\"\",\"country_code3\":\"\",\"dma_code\":\"0\",\"region_name\":\"\",\"region_code\":\"\",\"postal_code\":\"\",\"area\":\"0\",\"metro\":\"0\",\"asn\":\"0\",\"latitude\":0,\"longitude\":0,\"location\":{\"lat\":0,\"lon\":0}}","type":"object"},{"id":"dst_geoip","name":"Destination Geo IP","value":"{\"timezone\":\"\",\"continent_code\":\"\",\"city_name\":\"Ashburn\",\"country_name\":\"US\",\"country_code2\":\"\",\"country_code3\":\"\",\"dma_code\":\"0\",\"region_name\":\"\",\"region_code\":\"\",\"postal_code\":\"\",\"area\":\"0\",\"metro\":\"0\",\"asn\":\"0\",\"latitude\":39.04690170288086,\"longitude\":-77.49030303955078,\"location\":{\"lat\":39.04690170288086,\"lon\":-77.49030303955078}}","type":"object"},{"id":"device","name":"Device","value":"{\"id\":\"40b0341f3844\",\"name\":\"Device (40b0341f3844)\",\"category\":\"other\",\"vendor\":\"other\",\"os\":\"other\",\"osver\":\"\"}","type":"object"},{"id":"community_id","name":"Community ID","value":"1:xrgCDlnJwtmHf8FZpOuohWeItwY=","type":""},{"id":"handshake_result","name":"TLS Handshake Status","value":"None","type":""},{"id":"_id","name":"_id","value":"AY_PB7YoXodT5kICKAZl","type":""}]

These may fall of my log by tomorrow, so if you want the rest of the blocks, let me know so I can grab them. But again, I don't think this is going to be a common problem due to the lack of popularity with these applications. The stuff I had with Creative Cloud I did report because the chances that another user might have the same issue are much larger. Same goes if I find something funny with Protools, but so far, so good with Protools and Avid Media Composer.

[Seimus]

One hint,

If you have some domains blocked, that are false positive and show wrong category and you dont want to open the ticket for ZenArmor, you can use their web portal

https://www.zenarmor.com/site-classification

However is weird that id.sonyentertainmentnetwork.com god blocked because its categorized as "Entertainment".

But
exelator.com > categorized as Advertisements
playstation.com > categorized as Games
playstation.net  > categorized as Games
sonyentertainmentnetwork.com >  categorized as Entertainment




Regards,
S.

[Greg_E]

The really sad part is that Sony decided to lump productivity software into their entertainment software which makes stuff like this difficult to deal with. I can guarantee that any medium to high end post production facility will block things like games (and a whole lot of other stuff) to reduce the possibility of "something happening" that allows a movie to get out into the wild.

[sy]

Hi,

I checked the domains and mostly the same category in different platforms as well. So you need to whitelist them.

[astraios12]

It's smart to remember that software tied to larger networks like PlayStation might require adjustments in security settings, which can be tricky when trying to maintain both accessibility and security.

For anyone documenting similar processes or creating tutorials on handling such software issues, https://www.movavi.com/screen-recorder/ can be a great tool. It allows you to capture your screen and voice easily, which can be invaluable when you need to share precise steps or explain complex setups effectively to others facing the same challenges.