This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS scanning for search engines only?

I recently moved from UTM9 to XG and I'm trying to enforce Safe Search only (i.e., I only want HTTPS scanning for search engines).

Article ID: 123589, community.sophos.com/.../123589, works as expected, however I'm then faced with exempting multiple Web categories.

If memory serves, UTM9 offered the option of HTTPS scanning for specific domains only (i.e., search engines to enforce Safe Search). XG appears to only offer HTTPS scanning with exceptions.

This thread was automatically locked due to age.

0 sachingurung over 9 years ago

Hi Dan,

After configuring safe search and enabling HTTPS scanning in XG, bypass the categories from scanning exceptions.

Please refer: https://www.sophos.com/en-us/support/knowledgebase/123178.aspx.

Hope that helps :)
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan K. Snelson over 9 years ago in reply to sachingurung

Sachin:

Yes, that article helps, however streaming services like Netflix then break:

https://community.sophos.com/products/xg-firewall/f/129/p/74689/289753

Using Log Viewer to exempt denied categories doesn't seem to help, either.
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 9 years ago in reply to Dan K. Snelson

I will post the relevant solution for netflix in the refereed thread.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan K. Snelson over 9 years ago in reply to sachingurung

Sachin:

Have you had a chance to identify a solution for Netflix?
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 9 years ago in reply to Dan K. Snelson

Hi Dan,

I think Netflix issue has a solution marked in the thread that you pointed in your previous post. Configure an exception policy suggested by Luk or create a firewall rule without filter dedicated for Netflix to stream.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan K. Snelson over 9 years ago in reply to sachingurung

Sachin:

While there is a response marked as accepted, it doesn't appear to answer Jhawk44's original question for detailed instructions.

--

Dan
Cancel
Vote Up 0 Vote Down

Cancel