Safe Search

Please make sure:

1. HTTPS scanning is enabled on the Firewall rule.

2. Safe search is enabled.

3. Under web filter policy, the Adult or Sexually Explicit categories are set to DROP for both HTTP and HTTPS traffic.

Regards,

Asad

Hello AsadulHasan,

I did before like this >https://community.sophos.com/products/xg-firewall/f/web-protection/89648/safe-serach

Now I want ;

Is there any safe search  setting about the exclude to android and ios device? The android and ios devices are in the same lan with pcs .

I don't want to separate this devices group. I want to all device in the same lan.

IP/MAC host associated can be problem for the customers who have 250 or more people  etc.

Hello Yasir,

This is not possible because Safe search policy is applied globally. Creating a Firewall with source as IP host or MAC host is the only option we have because Firewall could not detect if the request is coming from Android or Windows or MacOS.

Reagrds,

Asadul Hasan

Hello Yasir,

This is not possible because Safe search policy is applied globally. Creating a Firewall with source as IP host or MAC host is the only option we have because Firewall could not detect if the request is coming from Android or Windows or MacOS.

Reagrds,

Asadul Hasan

Even if creating Firewall Rules per OS type at the moment is something that should be considered soon.

The IT world has changed and Firewalls should adopt to those changes.

Vote the feature requests:

https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/11707605-device-specific-authentication

https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/19043770-source-devices-in-firewall-rule

Regards

A glimpse to the future:  In v17 SafeSearch for Google/Bing/Youtube will not require HTTPS decryption.

AFAIK making SafeSearch configurable at a more granular level is in the roadmap, with no ETA.  I don't know anything about device-specific configuration.

Hi Michael Dunn,

I'm looking to Sophos Roadmap. And The SSL decryption is seeing on SFOSv18. Which is true? Is SSL(https) decryption on v17 or v18?

Thanks,

SSL decryption has been in every version of SFOS.

SafeSearch enforcement with SSL decryption off is in v17.

I'm not entirely sure what the roadmap for v18 you presented is trying to show, but there are future performance enhancements when doing SSL decryption.

Hi Michael,

The Safe Search and SSL Decryption  now require a certificate, for intervention.  Will certificates be issued to certificate clients at 17?

Bing and Google have provided mechanisms to do SafeSearch without SSL decryption or certificates, so in v17 SafeSearch can be applied even if you are not doing SSL Decryption.  Yahoo has not provided a mechanism and still requires SSL Decryption to enforce.