Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Subscribers 28 subscribers
  • Views 6222 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Tips on how best to block web access from Mac hosts

stego41

Running latest xg firmware is on Intel  core 2 duo with 4 gb ram.

Curious to know how best to block access from certain Mac hosts/list using an access time?

Running a basic setup, would simply like to block kids iOS devices during the week and enable Chromebook web access for homework time.

Currently using firewall policies at top of list ... But didn't see where I could use access times?? Eg deny during homework time ...custom access time

Still trying to learn the ropes with xg firewall after spending a little over a year with UTM 9

Thanks



This thread was automatically locked due to age.
Parents
  • +2

    There's no operating system based access controls you can append to rules, instead you should define 'clientless' objects within your XG with the kids devices' MAC addresses associated to each different clientless object.

    Now that you've identified each unique device you can associate these devices within your security rules to block or allow them during certain times.

    Additionally, within your Security Rules, within the 'Source' definition section you can associate a 'During Scheduled Time' element which will enforce the rule during the times you define.  There are many presets you can use (for example, work hours, weekends) but you can add one to your liking.

    You should be then able to build rules that block your kids iOS device during home work time (LoL - poor kids) and then only allow then to use other approved devices...

    Good luck with your kids, I hope they don't have physical access to the XG as I'm sure they'll kick it and then blame the family pet ;)  Mine did...

Reply
  • +2

    There's no operating system based access controls you can append to rules, instead you should define 'clientless' objects within your XG with the kids devices' MAC addresses associated to each different clientless object.

    Now that you've identified each unique device you can associate these devices within your security rules to block or allow them during certain times.

    Additionally, within your Security Rules, within the 'Source' definition section you can associate a 'During Scheduled Time' element which will enforce the rule during the times you define.  There are many presets you can use (for example, work hours, weekends) but you can add one to your liking.

    You should be then able to build rules that block your kids iOS device during home work time (LoL - poor kids) and then only allow then to use other approved devices...

    Good luck with your kids, I hope they don't have physical access to the XG as I'm sure they'll kick it and then blame the family pet ;)  Mine did...

Children
No Data