Default policy shows as applied, not in any firewall rules

This is defined in a rule in your firewall rulebase somewhere under Security Features.

Hi Stuart;

Thanks for the quick reply. All of my firewall rules have an Advanced section, some allow application of a web policy, but these are all set to none?

Is there another place I need to look?

Anyone have a console command I can run to determine where this policy is being applied?

Hello James,

Thank you for contacting the Sophos Community.

I sent you a command via PM which will give you the output of the WebPolicies and and the WebFilter ID and then a second command  that will give you the output on which rule it is being applied. 

Another easy way would be to check if a Firewall rule has the WEB in green color, that is the one that has the Web Policy applied to.

Regards,

emmosophos 

Thanks for that. Yes, none of my firewall rules has the 'web' indicator.

Hi,

more than  likely the policy is referenced in another policy, so you will need to open each policy working your way down from the top until you locate it.

Ian

Hi,

more than  likely the policy is referenced in another policy, so you will need to open each policy working your way down from the top until you locate it.

Ian

Thanks All;

(Embarrassed emoji) I still have my example rules in the rule base for reference, all turned off. And lo and behold.....

Just because a rule is not applied, the policy is in use.