Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 6613 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Question about: Restrict login domains for Google Apps

gabriel ong

if you go to Web Filter>>Advance Settings>>Restrict login domains for Google Apps Allowed domain(s) example (testing@gmail.com)

they said in order for this feature to work you need to enable Decrypt & Scan HTTPS and install the SecurityAppliance_SSL_CA  on the local computer.. I've done all of this steps but it still allow other domains to be login in to google mail, i'm frustrated with this am i lacking a steps or rule? can you please shed some light on me please?

 

 

Regards,



This thread was automatically locked due to age.
Parents
  • 0

    Calling out to people that have gotten this to work! 

    Protect>Web>Policies>(Select your CFS Policy)

    Inside CFS Policy (Under "Advanced Settings") is the ability to CHECK "Restrict login domains for Google Apps"

    In here I placed in the "Allowed Domain(s)" :      mydomain.com (Is this WRONG?)

    Within this SAME Policy I have BLOCKED: Web Mail (So my users can NOT go to any other WEB MAIL (Outlook, Yahoo Mail, or even Gmail (other than our DOMAIN)).

     

    PROBLEM:  With the exception added, NOTHING happens.... No matter if I use Google Chrome Browser (or any browser), or even the downloaded Google Apps MAIL application, I get "Blocked Request": Web Mail

    Is there a trick to getting this to work?

     

    Sophos has VERY POOR documentation on this:  From HELP:

    Restrict login domains for Google Apps
    Restrict logging in to Google Apps only on the domains specified.
  • 0 in reply to Jarrod Goetz

    Hi Jarrod,

    I'm disappointed with this feature of sophos xg 310 model, I was able to run this feature you need to enable https scan and decrypt and go to application filter and deny the quic protocol but by blocking that protocol it should only block https traffic from the website or google mail to be specific. But this blocks all traffic going thru quic protocol like remote destop connection, teamviewer etc. This must be fixed immediately since this is the reason why we purchased sophos xg310 for our infra.

    Hope someone asses me with this issue.

Reply
  • 0 in reply to Jarrod Goetz

    Hi Jarrod,

    I'm disappointed with this feature of sophos xg 310 model, I was able to run this feature you need to enable https scan and decrypt and go to application filter and deny the quic protocol but by blocking that protocol it should only block https traffic from the website or google mail to be specific. But this blocks all traffic going thru quic protocol like remote destop connection, teamviewer etc. This must be fixed immediately since this is the reason why we purchased sophos xg310 for our infra.

    Hope someone asses me with this issue.

Children
No Data