Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 7191 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Preventing access to user accounts from kids' devices

Dean Jones

I am setting up Sophos XG Home for the first time, mainly for some security and to control the kids' time on the internet and access to inappropriate sites. I need to provide guest access for when their friends are over but I don't want the kids to hijack the guest accounts to extend their own time on the internet.

Is there a way to block guest account access from known users, known devices or known IP addresses?



Edited Tags
[edited by: Erick Jan at 12:51 AM (GMT -7) on 16 Sep 2022]
  • +2

    Dean,

    if you use DHCP server on XG, you can create a static DHCP entry on Network > DHCP and then make sure to write down all your kid's devices. After that you can apply policy per IP so your kids cannot escape from their rules.

    Regards

  • 0 in reply to lferrara

    Thanks, if I am creating policy and firewall rules by IP address do I need to create IP Hosts for each IP address in order to create IP Groups? Is it possible to just create an IP Group based on an IP Address range?

    I have given my kids' devices reserved IP Addresses in DHCP.

    Also, is it possible to set up an IP group which includes all IP Addresses which are not included in other groups? I would like to do this to pick up any device on the network without a known and allocated IP address which will basically be for guests. I can then apply firewall rules to this group.

  • +1 in reply to Dean Jones

    Dean,

    under host and services menu you can create IP host and IP host groups. IP Range are allowed so you can play with them and test the best configuration you can achieve.

    For the DHCP, you can give a Start IP and End IP ranges. You find the option under Network > DHCP

    Regards