Web Gateway - policies and categories for some users (board directors)

"Note: The policies at the top of the list override the policies at the bottom of the list."

If you have a user in multiple policies, the top most policy listed will take precedence.  Please try sorting the policies in the order you wish them to be applied.  Be aware that Central is having major issues with the Web Gateway and policy updating at this time however.

"Note: The policies at the top of the list override the policies at the bottom of the list."

If you have a user in multiple policies, the top most policy listed will take precedence.  Please try sorting the policies in the order you wish them to be applied.  Be aware that Central is having major issues with the Web Gateway and policy updating at this time however.

Hi Keith, 

tks for quick reply, where should I go to check that order?

In Central, on the left hand side:

Web Gateway - Policies

You will see a list of your policies on the right and should be able to drag and drop them into a new order as needed.

ok, the 'new one' created is on the top, it has:

• 01 specific user set;
• 'web filtering' enable with one 'domain.com' as exception

But the user keeps unable to access that website... Why?

Maybe our 'web gateway policy' is in conflict with 'Base Policy - Web Control' from the endpoint itself? Who of these controls will be used??

i found this post saying to avoid use both 'Sophos Endpoint Web Control' and 'Sophos Web Gateway' at the same time - as below. Is that true?

community.sophos.com/.../web-control-vs-web-gateway

This is so usefull
###########

What is the difference between Web Control and Web Gateway in Sophos Central Admin?

• Sophos Central Web Gateway has all of the functionality of Sophos Central Web Control, plus several more features.
• Using both the Web Gateway and the Web Control is not recommended. If you are using the Web Gateway, please disable the Web Control.

Source:

Sophos Central Web Gateway - FAQs
community.sophos.com/.../122462

Hi Renato.  The biggest difference I am aware of between the two is the reporting.  The Web Gateway allows much more detail in terms of who visited what and when.  Apparently they can conflict with each other and that is why it is recommended to disable Web Control.  Support told me that this can be done under [Endpoint Protection] - [Polices] - [Base Policy - Web Control] - [Settings] - move the sliders for Web Control to off (grayed out).  Be sure to leave it as enforced as you are enforcing it to not do anything.  Don't forget to hit 'save' - I know I have made that mistake before.  :)

Regarding your question about sites still being blocked, Sophos has been having a major outage of the Web Filter since May:

https://community.sophos.com/products/sophos-cloud/f/sophos-central/92087/issue-cloud-web-gateway-unable-to-establish-a-connection-with-the-cloud#pi2151=3

Unfortunately, it has been hit or miss on policy updates and logging for months now.  

Feel free to message me if you have other questions.  I will help where I can.

-Keith