This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocked URLs for Default Policy not working?

I'm trying for a while to get blocked url for default policy to work on an XGS116 run 18.5.1 FW. It seems this feature does not work at all? Anyone has got this to run? I'm trying to explicitly block an url without going through a category. However the blocked stes are always automatically approved even so they are placed in top position of the policies. screenshots: http://b3.ms/6x1nzldjo9DQ b3.ms/Emy9gEypvnkR http://b3.ms/0xZnX3KBPAop

Thanks

Daniel

This thread was automatically locked due to age.

Top Replies

Vishal_R over 4 years ago +1

Hi, Daniel Kloke Also as per the attached snapshot you have enabled DPI scanning, so ensure that the matching SSL/TLS inspection rule action is set to "decrypt" in place of "do not decrypt". Also, give…

Parents

0 Vishal_R over 4 years ago

Hi, Daniel Kloke Also as per the attached snapshot you have enabled DPI scanning, so ensure that the matching SSL/TLS inspection rule action is set to "decrypt" in place of "do not decrypt". Also, give it a try by selecting "Block QUIC protocol" if needed on the rule.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up +1 Vote Down

Cancel
0 Daniel Klose over 4 years ago in reply to Vishal_R

Hi Vishal

I have now switched to web proxy because we have an issue with IPS anyways. However, even when blocking quic, I can't block the test site. Any idea why?
Also, for general policy blocked websites (drugs, alcohol etc) we are getting an ssl error first when web proxy mode is enabled. Any idea how to fix this?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Vishal_R over 4 years ago in reply to Daniel Klose

Hi Daniel Klose: With enabling Web proxy, hope you have also enabled the option "decrypt HTTPS during web filtering " tick mark - If not then please enable the same. Also to avoid SSL errors you may install an SSL CA certificate in your machine as per the below KBA.

support.sophos.com/.../KB-000035645

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up +1 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Daniel Klose

Hi,

have you installed the ca on your test device? Logviewer will show the application connecting and receiving data until the web policy can identify the web site and not pass traffic to the receiving device.

ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 rfcat_vk over 4 years ago in reply to Daniel Klose

Hi,

have you installed the ca on your test device? Logviewer will show the application connecting and receiving data until the web policy can identify the web site and not pass traffic to the receiving device.

ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data