Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 2024 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG is blocking public WIFI splash screens

James_GC

Hi,

 

We've had a number of staff members complaining that they can't connect to public WIFI hotspots on trains etc, as Sophos is blocking them. I thought this may have been the endpoint as per a similar thread on the forum, but it appears to be our XG setup thats blocking it. 

We have our XG web filtering setup as a proxy on the client machines, and users have had to disable the proxy to connect to public WIFI. This leaves the user totally unprotected, and we will be disabling the ability for users to do this very shortly. I believe from the users affected that the splash screens won't even load whilst running through the proxy. 

 

If anyone can recommend any fixes it would be greatly appreciated.



This thread was automatically locked due to age.
  • 0

    Hi James,

    1/. you can create a proxy.pac file that is run by your users at LAN authentication time.

    or

    2/. you can set the web browsers to determine if there is an active proxy on the network.

     

    Ian

  • 0 in reply to rfcat_vk

    Hi Ian,

     

    Thank you for the response. Sadly the pac file wouldn't be maintainable as we don't necessarily know where our people are going to be with regard to hotels/trains etc.

    And if the proxy is bypassed when on public WIFI it leaves the client unprotected. It's almost as if we need them to allow unhindered connection before applying the proxy. We also don't want people to have the ability to switch it off whenever they feel like it.

  • 0 in reply to James_GC

    Hi James,

    I did not see that you wanted a proxy active all the time. You can't do that because every site will have a different IP address and might even have their own proxy.

    You need to allow them to connect then automatically setup a VPN back to the office, a slow and user unfriendly process. Will not go down well when you apply it to the CIO or the CEO.

    You need to install anti-x software on each device to provide some protection. You also need a device manager, but my limited experience with these wasn't good at managing access to bad sites etc.

    I think you need to step back and review what your are trying to achieve and then workout is it achievable without causing too much user angst.

    Ian