Web filter

hi thanks for the reply,, i tried web filter using video hosting category but the website still working, i haven't try Application Control let me try

Webfilter is ok - it blocks YouTube - you probably applied it wrong. Try "CIPA Compliance" preset webfilter.

no luck !!! as you said i tried both web filter and application control but the YouTube site still working. i have just single default rule and applying those filter to the default rule.

Create another rule which allows whatever you need and apply webfilter to it. Use #Default_Network_Policy as "Drop all" final rule - e.g. set it to drop all traffic.

Finally its working !! last question how can i add separate ip address (users) and how to block downloads like exe,msi,media files

hi, i just notice that all websites getting blocked, what wrong with my policy rules ?

I don't know, but your first screenshot indicates that you require Heartbeat, why ? Do you have Sophos Managed Business Antivirus software ?

i don't know the use of heartbeat, i just try maybe it required to block something like that, if you don't mind i will give u access to my pc could u please check it for me.

I'm sorry, but I'm not providing personal support. I you need one please consider buying a Sophos product - you will be able to call them.

Going back to your config. Make sure you have turned of Security Heartbeat for all your policies if you don't know what it is.

Hi Slawek,

Hope you find this message in good health , im trying to configure a similar setup on my home lab. I'm trying to block internet access for Port 3 which is a member of LAN Zone.

I created a Firewall rule to reject traffic and placed it on top of the default rule

When i switch it ON , it seems to work ,but when i switch it Off , it does not return to normal state

Also is there any way to block an IP range , for eg on Port 3 i have 10.0.0.0 /24 

Appreciate any assistance

Thanks

Raju George

Hi,

you need to reset the connections because they will be still stuck pointing at a blocked function.

Please expand your block IP ranges is it internal, external?

Ian

Hi,

you need to reset the connections because they will be still stuck pointing at a blocked function.

Please expand your block IP ranges is it internal, external?

Ian

Morning Ian,

I created a firewall rule with IP Host ( IP range 10.0.0.0 /24 ) - Port 3

Source zone -LAN  , Source network - IP Host group 10.0.0.0  Destination Zone - WAN Destination network - Any , Services - Any  ,  Action - Drop

It seems to do the trick 

But my laptop is connected to Port 1 ( 172.16.16.0 /24 ) which has internet and is connected to company VPN

When the above firewall is enabled , test laptop loose internet , which is good

But then my work laptop gets this error message from Zoom application 

"This server could not prove that it is Zoom. Its security certificate is from Sophos SSL CA_"

I believe Zoom sees my Sophos Certificate as untrusted , how can i make it trus.

Also this happens only when i enable the firewall rule, else its all fine

Also loosing connectivity to MS Teams when firewall enabled

IP ranges are Internal

Appreciate your cooperation

Thanks

Raju George