How to set up ad-blocking web policies ?

Hi J Thai,

Kindly see below if this may help you

TechVid: https://www.youtube.com/watch?v=di5FnRmjZ4Y

Sophos XG has a built-in Ad block Category which can also be customized

Web>Categories

Thanks for your reply buddy. Does Sophos maintain a list or category for malware, malicious and crypto-mining domains of any kind ?

Hey J Thai yes Sophos does maintain such a list. Sophos Labs and Sophos AV !! 

Thanks for your quick reply buddy. In addition to that, does Sophos XG firewall let me fetch a collective blocklist of websites online, e.g. this one (https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt) ? I can not download this list then fetch to the firewall manually because it is frequently updated online.

Below is a screenshot of AdGuard Home which allows me to fetch such lists from the Internet (mainly Github).

Thanks again buddy.

Hello J Thai,

Sure you can fetch that list from the site mentioned and create a list which you can upload it under the following path:
Web > URL groups > add 

The default SSL/TLS exclusion rule excludes these groups from TLS decryption:

• Local TLS exclusion list: You can add URLs to this list.
• Managed TLS exclusion list: Domains known to be incompatible with TLS decryption. Firmware updates may update this list.

And then you can add the URL groups with the desired action as allow/block - http/https !! 

Hello J Thai,

Sure you can fetch that list from the site mentioned and create a list which you can upload it under the following path:
Web > URL groups > add 

The default SSL/TLS exclusion rule excludes these groups from TLS decryption:

• Local TLS exclusion list: You can add URLs to this list.
• Managed TLS exclusion list: Domains known to be incompatible with TLS decryption. Firmware updates may update this list.

And then you can add the URL groups with the desired action as allow/block - http/https !! 

Thanks for your quick response buddy.

So I understand that by copy the txt file link when adding that URL group, Sophos XG will automatically fetch the list and update it routinely for me ?

Thanks again buddy. 

Hey J ThaiYou must enter a valid domain name & regular expressions aren't allowed and it can update a maximum of 10,000 URLs in URL group !!