Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 2 answers
  • Subscribers 27 subscribers
  • Views 9815 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do I set time restriction quotas for specific applications?

TravisMoore

Hello, our company has just recently installed a Sophos XG430 running SFOS 15.01.0 MR-3 and we are looking to start shaping our policies.

I have received a request to restrict a list of applications to 1hr usage per day for a select group of individuals.

Browsing through the GUI I have found spots where I can restrict internet usages as a whole and either block or allow applications.

Where do I go to begin setting time restriction quotas to specific applications?



This thread was automatically locked due to age.
Parents
  • 0

    Hi Travis,

    To achieve this, configure a Firewall rule which defines the schedule policy (found in the source section). Define the specific filter policies to allow the application and website within the FW rule. You can keep Allow All in the filter section if no restriction is needed. Place the scheduled FW rule on top of the general firewall rule which is filtering the traffic for rest of the time. PFA screenshots,

    I totally missed out on this part in my previous reply.

    Thanks

  • 0 in reply to sachingurung

    The problem with that, is we were informed that the feature already existed when we were given the sales pitch.

    So as of now there is no way to do specified quotas?

  • 0 in reply to TravisMoore

    Hi Travis,

    Apologies for the previous suggestion, I wonder how did I miss that simple configuration. I have edited my first reply to this thread. Please have a look into it.

    Thanks

  • 0 in reply to sachingurung

    Sachingurung, thank you for the update.

    Looking at the edit, I see what you are talking about, but this seems to be a policy that restricts based on time of day.

    What we were interested in when purchasing this unit was the ability to set a quota based on time used. 

    So rather than say noon-1pm, it would be a restriction of 1hr of usage, regardless of time of day.

    At this time, is such a quota impossible?

  • 0 in reply to TravisMoore

    Hi Travis,

    That is possible but once the reserved quota is up the cycle will not restart until the next days. Refer https://community.sophos.com/kb/en-us/123063.

    Thanks

  • 0 in reply to TravisMoore

    HI Travismoore, 

    As per the suggestion posted , this feature is applicable for user's policy and not applicable for Rule-based policy . You may set the Sufing Quota based on the user- time relation . Eg if a user log's in and the policy  is set for an hour . The user would follow the policy applied on that user for that hour and once the hour is used -up  then the user would be logged off and would not login the same day. XG does not have a policy that would control the usage web/application traffic to utilize one hour a day (unless its Scheduled to allow between Specific timings)

    Cyclic  day/week/month

    Non-Cyclic - One time .

    Thanks and Regards 

    Aditya Patel | Network and Security Engineer.

Reply
  • 0 in reply to TravisMoore

    HI Travismoore, 

    As per the suggestion posted , this feature is applicable for user's policy and not applicable for Rule-based policy . You may set the Sufing Quota based on the user- time relation . Eg if a user log's in and the policy  is set for an hour . The user would follow the policy applied on that user for that hour and once the hour is used -up  then the user would be logged off and would not login the same day. XG does not have a policy that would control the usage web/application traffic to utilize one hour a day (unless its Scheduled to allow between Specific timings)

    Cyclic  day/week/month

    Non-Cyclic - One time .

    Thanks and Regards 

    Aditya Patel | Network and Security Engineer.

Children
No Data