Blocking of internet and allowing certain ips and ports and URL only

Question

Dear Team, 
 
 We want to block complete internet and allow only certain websites, urls, ips and port on user machines. 
 Please guide us on how to implement this.

FormerMember · Accepted Answer

Hi Harshal Kothavade , 
 The firewall evaluates rules from highest to lowest order. For example, if a rule that allows all traffic precedes a rule that blocks a specific traffic type, the rule that allows all traffic is the effective rule. Add the allow policy with the custom category at the top, and block all next to it. 
 Check out the following document for more info: Policies 
 Thanks,

FormerMember · Answer

Hi Harshal Kothavade , 
 Thanks for reaching out to the Community! 
 What is the firmware version on your firewall? 
 You could configure custom web categories to achieve your requirements, add websites, URL, IP address that user should have access to, and block all other web categories in web policy. 
 Check out the following KBA for more info: 
 
 Sophos XG Firewall: How to create a custom web category 
 
 Thanks,

Blocking of internet and allowing certain ips and ports and URL only

Top Replies