This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Gmail only web policy

tom greene over 8 years ago

Hey,

I need to setup web filter for a few users that should only be able to open gmail and google drive and nothing else.

These users only need to access gmail for email purposes and google drive.

I dont want the users to be able to search google or be able to perform image searches on google.

What is the best way to set up a web filter policy like this?

This thread was automatically locked due to age.

Parents

0 lferrara over 8 years ago

Tom,

you can use filters as described here by Michael:

https://community.sophos.com/products/xg-firewall/f/sophos-xg-firewall-general-discussion/93450/is-it-worth-changing-to-an-xg-version#pi2151=2

On your own, navigate to gmail and google drive and check which URLs are used.

You should be ok with that!

Let us know!
Cancel
Vote Up 0 Vote Down

Cancel
0 tom greene over 8 years ago in reply to lferrara

Hey Luk,

I have tried similar ways as above but it really is hard to separate google.com and google image search from Gmail and Google Drive.

If someone has done something similar to this then maybe they can share how they did it.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 8 years ago in reply to tom greene

Unfortunately, Google is so intertwined with itself that I don't think this is practical.

If you wanted to, what i would do is first isolate a person, then perform the google login, gmail, send and receive mail. Capture the logs and look at all the domain names and paths that were needed.

Now create a custom group, and add the urls that you think are needed for gmail to the group.

Now create a web policy that is Block All, with a rule above that is allowing the custom group.

Try it. Watch for anything that doesn't work and watch logs for anything that is blocked. Refine the URLs in the group so that it blocks what you want and allows what you want.

The other option - which may work for you is to rely on G Suite. If you have a G Suite account and all your users are only accessing your domain. Using the XG, you can limit it so that only users from your domain can log in.

GSuite allows you to turn off many services, however I don't think "Search" is one of them.

https://support.google.com/a/answer/182442?hl=en
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Michael Dunn over 8 years ago in reply to tom greene

Unfortunately, Google is so intertwined with itself that I don't think this is practical.

If you wanted to, what i would do is first isolate a person, then perform the google login, gmail, send and receive mail. Capture the logs and look at all the domain names and paths that were needed.

Now create a custom group, and add the urls that you think are needed for gmail to the group.

Now create a web policy that is Block All, with a rule above that is allowing the custom group.

Try it. Watch for anything that doesn't work and watch logs for anything that is blocked. Refine the URLs in the group so that it blocks what you want and allows what you want.

The other option - which may work for you is to rely on G Suite. If you have a G Suite account and all your users are only accessing your domain. Using the XG, you can limit it so that only users from your domain can log in.

GSuite allows you to turn off many services, however I don't think "Search" is one of them.

https://support.google.com/a/answer/182442?hl=en
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data