Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 28 subscribers
  • Views 3860 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why youtube.com & sophos.com is not blocked by URL-GROUP?

Peng Xia

 

Although I tried to set up the web policy and URL group like above, www.youtube.com, www.sophos.com and even the sophos community is still accessible.

 

Is there anything missed though?

 

Thanks,



This thread was automatically locked due to age.
  • 0

    Hi,

    not sure why you want to block sophos.com, but it is in the web exceptions by default?

    also your filter is very basic, there are many sites for both url groups.

    Ian

  • 0 in reply to rfcat_vk

    SFVH (SFOS 17.5.0 GA)

     

    I was trying to block youtube.com but allow all GSuite access through URL groups. It worked in a quite interesting way that Google Slide was playing the game. As I used "default deny all" policy, I was assuming all URL except I've put into white list would be inaccessible. I did incidentally click search through google and found sophos/youtube was accessible. 

     

    That's why I thought I did something wrong from the configuration side.

  • 0 in reply to rfcat_vk

     

    Ian, another question is why teamviewer is by default enabled as exception?

  • 0 in reply to Peng Xia

    Hi Peng,

    teamviewer is in the exceptions by default because it requires a special work around for a bug in the teamviewer software.

    Blocking sophos/youtube, please remember that many sites have a youtube subset to provide sales and marketing, support videos etc.

    The web policy you created needs to be part of your firewall rule. You can try blocking it with application support as well.

    Please do a search of the forums and the KBAs for additional details.

    Ian

  • 0 in reply to rfcat_vk

    Hi Ian,

    Thanks for your replying. 

    I did apply the web policy with a separate firewall rules and specific clientless user for testing purpose

  • 0 in reply to Peng Xia

    Hi Peng,

    you need at the very minimum http scanning enabled and for full benefit you will need https scanning, otherwise there is no lookup.

    Ian

  • 0

    In addition to the exceptions you can see, there are a few hidden additional ones for accessing Sophos itself.  You cannot build a policy (even the deny all) that blocks access to Sophos.

    However if everything is correctly configured, you should be able to block the main youtube website using that.  It might not block embedded youtube videos that use different domains.