Block external site only for single IP address in LAN network

Question

I'm trying to block single website on single LAN address (both http and https protocol), but without success... My device: XG310. I got also DHCP service on Sohpos. 
 How to block this site for single IP? 
 Thanks in advance, Tom

MayurMakvana · Answer

Hello Tom, 
 
 Greetings, 
 
 Step 1: 
 You may need to have static IP set to that source IP. 
 
 Step 2: 
 Later, you can create a custom web category with the help of the below KBA: 
 https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Web/Categories/WebCategoryAdd/index.html 
 
 Step 3: 
 Add the category with the deny strategies in Web policy. 
 https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Web/Policies/WebPolicyAdd/index.html 
 
 Step4. 
 Create the firewall rule with the source zone and IP as with the source IP specified in step1 and apply the web filter policy created using step 3.