xFi Advanced Security is blocking my company's website

---

@josephpannone wrote:

Not an IP issue

---

I didn't say that it was. I just was replying to others with some info.

I'm having the same problem accessing my company website.  I'm able to access it on my iphone when going through the Sprint network but not from my home xfinity network.  I have disabled XFi Advanced Security but it is still not working. When I do a traceroute I get a "Request timed out" at hops 9,10,11,12,13, and 14 and then get a message that "destination protocol unreachable".  Please help.

Let's face it - THEY DON'T CARE!   I have a bunch of sites being blocked as well - THEY DON'T CARE!

I found a workaround.

I switched from the Comcast DNS to another and I can get to my sites.

Xfi was completely blocking my Mac from connecting to my wifi.  I had to shut off "Advanced" Security to remedy.  Basically Xfinitiy decided that my companies security software was a risk.  Cost me 3 days.  Be looking for alternatives to comcast in the near future.

Comcast/Xfinity,

I'm having the same issue, what is the deal? I cannot access any of our corporate websites all of a sudden. This is a major issue that needs a quick resolution.

Turning off advanced security is NOT a solution. How am I supposed to advise potential customers using xFi? Our websites utilize a shared IP and run on a secure server that has a real-time Malware scanner/blocker. This is not a shared hosting setup, this is a Managed VPS setup.

We need a solution ASAP.

Kind regards,

John

Hi @johnnybravo1  We understand how upset everyone on this forum is about their website being blocked by the xFi advance security and we have a ticket put in to fix the issues.  We will need you all to post the URL of each website and we will add those to the list with the others we already have.  We do have a ticket linking all of them together to be unblocked etc.   Thanks again we are doing it as fast as possible!  The only thing that can be done in the time being is for each person trying to access a blocked website to turn off advanced security etc. 

After 2 weeks clear,  getting blocked from work website again.

-Can get through with vpn
-Website is clear of all blacklists
-Comcast ip appears on 3 blacklists,   guessing that could be the culprit.

When things work, Comcast is the best service around, you also pay a premium price for it to run properly.

This  issue has remained unresolved for far too long. I  believe that Comcast has experts who can solve this, but there's not enough similar cases to justify a systemic issue &  layers of incompetence holding up a fast fix. For that reason, unless catastrophic, I generally avoid going through Comcast support ladder, wasting a lot of time on script jockeys,  getting to a qualified tech.

Thanks for trying though.

Forgot add Comcast ip, is on the following blacklists.

dul.dnsbl.sorbs.net
dnsbl.spfbl.net
dnsbl.sorbs.net

I turned off "advanced security" that does not help.  Read the thread above, please.

FYI, I can access your sites on  comcast

I cannot access:

www.cwdash.com 

www.forzadash.com

I believe it's something the sites are referring to that you have blocked.  

Our website is also getting blocked by xFi Advanced Security so many Xfinity/Comcast users can't access our website right now. When many Xfinity/Comcast users visit our website they see this (or similar) error message no matter which browser they use:

SSL_PROTOCOL_ERROR

And the only way they can access our site is to go into xFi Advanced Security settings and disable it. Once they do this, the site loads fine. When visitors go into their xFi Advanced Security "threat history" it says "1 suspicious site visit" and then it says "content from ____________ was blocked" (our website URL is listed; however, I do not want to post it publicly because it could hurt reputation). And this block is causing this error which prevents Xfinity/Comcast users from visiting our site.

Our site is 100% safe and clean and always has been. We're not on any type of blacklist and no other ISP or security programs have issues with our website. This is a false positive in the xFi Advanced Security settings and we need Comcast/Xfinity to whitelist our domain so this stops happening as soon as possible.

In this thread @ComcastJosh says he will whitelist domains that are being accidentally blocked by xFi advanced security. So we would like to know how to get our website whitelisted as soon as possible because this block that xFi Advanced Security put into place is really hurting our small family run business right now.

Please private message me to get website URL. I do not want to publicly post our URL since it will do additional damage to our reputation.

Hi All,

After 3 days of banging my head against my screen and multiple calls to Support with no resolution. I figured out what was causing my problem. Unsecure FTP.

I have 27 websites running off a single IP, when I FTP into each, I usually do so over SFTP. One of my FTP accounts was connecting over standard FTP.  I tested this theory and I was able to recreate the block.

First thing you need to do, log into your Xfinity account online, go to Internet > Network > Advanced Security. From here, click on your device, if you see "Unauthorized Access Attempt" chances are you are facing the same problem I did. Don't click "Help Me Fix It" because it won't. Instead click "More About This Threat" and then Click on "Threat History" you should see your sites IP address there with a message like; "Are you or someone you know trying to access this device" and a random port number. Click allow access, and see if you can now access your site.

Try connecting to FTP unsecure again and it will trigger another block. I did this several times to confirm that FTP was the culprit. I re-setup my FTP connnection to use SFTP and tried this experiment again and all is well. No more blocking.

One thing that helped me in this process was https://downforeveryoneorjustme.com/ - Everysite I tested was just down for me. 

Hopefully this helps someone.

Kind regards,

John