Hello,
I have been reading a bit about My policy overrides - Sophos (XG) Firewall and even though I understand the purpose, I am confused on how to use it. Based on the description:
|
Policy overrides allow you to temporarily unblock websites that are blocked by web policies. To turn on or turn off a policy override session, use the Status switch. To view the page on the user portal and create policy override sessions, you require your administrator's authorization. You can create a policy override session, specifying the access code, the allowed websites and web categories, and the schedule during which the policy override is in effect. You can't unblock websites for which your administrator disallows policy overrides. Your administrator can turn on, turn off, or delete the policy override sessions that you've created. |
I have few questions:
- If this is meant to give the user the ability to override a policy that is preventing him from browsing sites for example, why is the user deciding what categories to override? (Shouldn't any user select everything they can possibly override right from the start?)
- When a user gets into a session (entering the access code to override a blocked site), when is this session closed? (Can the user close it manually when done?)
- Is the access code supposed to be a "secret"? If someone else is close to the user entering the code, how is the code protected so it doesn't get reused by someone else? (Other than changing to a different code every time from the user portal).
- I believe I saw one time that instead of using a code, overridden access was provided by having the user sign in to the user portal, and as long as that session was available, the additional access was provided. Once the user closed the session to the user portal, the overrides ended. (Was this ever a feature?)
I'd love to use this feature if I understand correctly how to use it.
Thank you!
Edited TAGs
[edited by: emmosophos at 10:13 PM (GMT -7) on 24 Mar 2022]
