primeros pasos

Antonio,

sorry but I do not speak spanish. You can create users on XG and then apply firewall rules to users directly by ticking the box "Match know users" and adding there the users.

The other option is to import users from AD. Here the Sophos KB:

https://community.sophos.com/kb/en-us/123156

Anyway I can give you an hand tomorrow night (as soon I am back at home).

Regards,

The installation is for home and have controlled the boys (children). Is not professional, I have created a new rule and a more restrictive filter category. A pair of users within a group, and each user identified by the mac of their pcs. Restingiendo the duration of its access to Internet in schedule. But my question is:
By default the XG firewall is a transparent proxy? Are connected and there is no validation window as if it were a captive portal.

The installation is for home and have controlled the boys (children). Is not professional, I have created a new rule and a more restrictive filter category. A pair of users within a group, and each user identified by the mac of their pcs. Restingiendo the duration of its access to Internet in schedule. But my question is:
By default the XG firewall is a transparent proxy? Are connected and there is no validation window as if it were a captive portal.

Antonio,

by default XG acts as a transparent proxy (when the web filter is applied). You can use authentication agent (SAA), Clientless users, LDAP and Captive Portal to authenticate Users.

In order to force the users to authenticate in some way, you have to enable "Match know users" on the Firewall rule. This will create the association user > IP and then the Firewall will apply the proper firewall rule.

If you use IP/MAC address, the match know users is not needed. In this case you will have logs per IP address and not user.

Thank you

And the order of the rules? Create a rule clone for a group of users and give it the secondary order.

Would work ok

Antonio,

Firewalls use the concept of "first match". So the first matched rule will be used. All the rest will be discarded!

Regards

I created a rule for users and I limit the connection time this rule I put it in the first place and has no effect neither time nor web content. Can access the entire internet.
any ideas?

 only see the ips no user conected? its normaly? my user its asociated a MAC address

they are two user with mac list, user1 and user 2 group clhildren

Antonio,

You should open a new thread as this one is answered.

On the new thread post the issue and screenshot of your configuration.

Thanks