Prevent Internet Explorer user to access internet

Question

Hi all, 
 
 We are using Sophos XG as our firewall. 
 
 We are now looking a way to block our Internet Explorer user from accessing the internet. They are limited to access local only when using Internet Explorer. Appreciate your help. 
 
 Thanks 
 Sandy

Prism · Accepted Answer

Hi, 
 
 You can do this with IPS + AppCtrl + SSL/TLS Decryption - You can add this on the existent Rules that you have for the Users to Internet. 
 
 You can create/add a AppCtrl Rule that blocks from IE 6 to IE 9. 
 
 And to block IE 10 and IE 11 you will need to create a custom IPS Signature. 
 
 IE 11 IPS Signature: 
 content:"|54 72 69 64 65 6e 74 2f 37 2e 30|";

IE 10 IPS Signature: 
 content:"|54 72 69 64 65 6e 74 2f 36 2e 30|";

I've only tested IE 11 Signature, but I'm almost sure It won't bring false positives on both of those. 
 
 Be aware you will need to decrypt all HTTPS traffic in order to block all Internet Explorer connections to the internet, or else only HTTP connections will be blocked.

Corporate IT · Answer

Hi Prism, 
 
 It is working now. Already tested it again. My problem is there is a firewall rule above the rule that allow all traffic without proxy to any services, so when I open IE and browse to some websites, it is allowed first on the above firewall rule. 
 Thank you very much for your help, appreciate it.

Prevent Internet Explorer user to access internet

Top Replies