Why do i have to create a new rule for customizing web and application filtering for one user?

Hi Kandarp,

Please share your firewall rules and filtering configurations, thanks.

Regards,

Raphael

Hi Raphael,

The rule i have highlighted is the one im talking about. These are all MAC based rules.

Even if i opt for 'match known users' , i.e user based rules, then too i need to create a rule right?

In the above scenario, the user was previously in Restricted access group and i had to give him special access for 2 hours to facebook/twitter. So i had to make a rule.

Now i have many such users who need access to different sites which are currently blocked for a limited time like say 2 hours.

Can someone please help with this?

Rather than creating another firewall rule you can create another rule in the web policy.  Though in some ways this just moves the solution, policy rules are much easier to create.

Go to Web, Policies.  Open the policy that the users are currently hitting.

Add Rule near the top.  Set the user to the one you want to affect and Activities to AllWebTraffic (for unrestricted) or to the specific category you want to allow.  Set the status to On.

When they are no longer allowed, set status to Off or delete the line.

Although you can also set Time Constraints, you can only select reoccurring time periods and cannot create a rule that automatically turns off in two hours.

Also, you should be aware that using the "Any" service basically opens the firewall up to allow traffic through every port.  This is most likely not your intention.

Thank you Michael for clearing that up for me.

There is an option available in sophos to provide access to specific ip without  creating new policy.This will help only if application filter is not blocking the website.

Go to Web-Exceptions,Add exception and enter the domains and source ip and select skip policy checks ,https decryption etc. You can disable the exception whenever required.

Thats SupportChn that is indeed really helpful.

Hi Sophos Team,

The method of giving exceptions "Web-Exceptions,Add exception and enter the domains and source ip and select skip policy checks" would not work majority of the times because of blocking by Application filter, so please include this feature of giving exceptions in Application filter for particular IP.

Correct, web exceptions do not apply to Application blocks.

If you want to allow specific applications, you will need to modify the Application Filter that you are using containing the blocks to put in an Allow for that application.