How to set up ad-blocking web policies ?

Hi J Thai,

Kindly see below if this may help you

TechVid: https://www.youtube.com/watch?v=di5FnRmjZ4Y

Sophos XG has a built-in Ad block Category which can also be customized

Web>Categories

Thanks for your reply buddy. Does Sophos maintain a list or category for malware, malicious and crypto-mining domains of any kind ?

Hey J Thai yes Sophos does maintain such a list. Sophos Labs and Sophos AV !! 

Thanks for your quick reply buddy. In addition to that, does Sophos XG firewall let me fetch a collective blocklist of websites online, e.g. this one (https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt) ? I can not download this list then fetch to the firewall manually because it is frequently updated online.

Below is a screenshot of AdGuard Home which allows me to fetch such lists from the Internet (mainly Github).

Thanks again buddy.

Thanks for your quick reply buddy. In addition to that, does Sophos XG firewall let me fetch a collective blocklist of websites online, e.g. this one (https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt) ? I can not download this list then fetch to the firewall manually because it is frequently updated online.

Below is a screenshot of AdGuard Home which allows me to fetch such lists from the Internet (mainly Github).

Thanks again buddy.

Hello J Thai,

Sure you can fetch that list from the site mentioned and create a list which you can upload it under the following path:
Web > URL groups > add 

The default SSL/TLS exclusion rule excludes these groups from TLS decryption:

• Local TLS exclusion list: You can add URLs to this list.
• Managed TLS exclusion list: Domains known to be incompatible with TLS decryption. Firmware updates may update this list.

And then you can add the URL groups with the desired action as allow/block - http/https !! 

Thanks for your quick response buddy.

So I understand that by copy the txt file link when adding that URL group, Sophos XG will automatically fetch the list and update it routinely for me ?

Thanks again buddy. 

Hey J ThaiYou must enter a valid domain name & regular expressions aren't allowed and it can update a maximum of 10,000 URLs in URL group !!