This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Testing "Inappropriate Website Control"

OK, have SEC 5 and SEP 10 installed on all PC's on the LAN.

All have updated today and all are reflecting that they are compliant with all the Policies.

The Policy for Web Control is enabled and set to "Inappropriate Website Control" and uses the default settings. (It's a clone of the supplied default policy).

So now to test. On one of the PCs on the LAN, I browse using FireFox or IE8 to several known sites that would instigate a BLOCK (Some Web Proxies and one PORN site).

No effect on the PC, it can access the sites with no trouble and no web events are registered in EC 5.

What am I doing wrong?

:19553


This thread was automatically locked due to age.
  • Hi,

    Couple of things to consider....

    If you open up SAV on the client (run SAVMain.exe/double click the Sophos sheild in the notifiation area) in the top left of the Window, does it show that Web Control is Enabled or Disabled?


    HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\Web Intelligence\Web Control

    Enabled

    is set to 1?

    If you're using Chrome for example and run:
    chrome://net-internals/#serviceProviders

    it shows the Sophos LSPs?

    The "Sophos Web Control Service " is running on the client?

    If in the policy you just add "Google.com" for example as a block site, this should make it down to the client registry:

    HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\Web Intelligence\Web Control \BlockedSites

    and that is then blocked in the browser?

    Regards,

    Jak

    :19589
  • Hi

    No mention of Sophos Web within the wow folder... not even a mention of Sophos.  Looked within the client software on the PC and no mention.

    Checked version  - info below.  Its as if it hasnt enstalled the web control version.

    :19705
  • Are you licenced to use the web control feature, maybe that's it.  Might be worth a quick call to Support if you're not sure.

    If you navigate to the share the client is using, e.g.:

    \\[server]\SophosUpdate\CIDs\S000\SAVSCFXP \

    What's the contents of the file: "escdp.dat "?  That might shed some light on it.

    Jak

    :19711
  • When I renewed this month that was the selling point from the provider.... so I should be

    Thanks

    :19713
  • <?xml version="1.0" encoding="utf-8" ?>
    <License format-version="1.0">
     <Features>
      <Feature>AV</Feature>
      <Feature>CLNTFRWLL</Feature>
      <Feature>CRT</Feature>
      <Feature>DLP</Feature>
      <Feature>DVCCNTRL</Feature>
      <Feature>HIPS</Feature>
      <Feature>PUA</Feature>
      <Feature>APPCNTRL</Feature>
      <Feature>SCA</Feature>
      <Feature>URLSCRTY</Feature>
     </Features>
    </License>

    content of the file - Billy

    :19715
  • HI,

    I have:

    <?xml version="1.0" encoding="utf-8" ?>
    <License format-version="1.0">
    	<Features>
    		<Feature>AV</Feature>
    		<Feature>CLNTFRWLL</Feature>
    		<Feature>CRT</Feature>
    		<Feature>DLP</Feature>
    		<Feature>DVCCNTRL</Feature>
    		<Feature>HIPS</Feature>
    		<Feature>PUA</Feature>
    		<Feature>APPCNTRL</Feature>
    		<Feature>SCA</Feature>
    		<Feature>URLSCRTY</Feature>
    		<Feature>PATCH</Feature>
    		<Feature>WEBCNTRL</Feature>
    	</Features>
    </License>
    

     So it looks like we're onto the problem at least.

    If I open up my subscription (SUNM view) (in my case recommended), I have SAV 10.0 Recommended as my chosen verision,  If I hover over or expand the "Features" column I have "Patch" and "Web Control" listed in that list, do you?

    Also of interest might be the file:

    \\127.0.0.1\SophosUpdate\Warehouse\catalogue \sumcf.xml

    What string do you have in the "WarehouseName" tag?

    Regards,

    Jak

    :19717
  • the tag I have is..... sdds.esc_10  Does that help ? 

    Thanks

    Billy

    :19721
  • I have "sdds.esc_wp_10 ".  I think you'll need to call Support to ensure that your credentials are pointing at the right warehouse and to double check that you're licenced for web control.

    Regards,

    Jak

    :19723
  • Will do.  Thanks for your help with this.  Will contact them tomorrow.

    Billy

    :19727
  • Thanks for all the input to my original question. It now seems that you need to be licenced for an Enterprise Account before Web control will become part of the subscription. Sadly we were not informed about this before we upgraded for two years and therefore will have to implement a third party solution. Even the Sohpos Support guy was confused about all the options.

    Why can't people make things clear when they advertise something? :smileymad:

    :20411