After importing AD (groups) in xg firewall how can we apply web policy on them?

Question

Hi team, 
 I have a question please reply so that I can resolve this. 
 Actually, I want to integrate Active Directory in Sophos Xg firewall and after that I want to apply web policy on different Groups. I have successfully authaticate and import AD Groups in xg firewall. I also enable Captive Portal so that users of AD can login using his AD credentials. Everything is working fine. I just want to know how can I apply web policy on AD groups . The method I followed did not work. 
 Please help ....

lferrara · Answer

Ali, 
 you have 2 options: 
 
 create several firewall rules where you add the users/groups and enable "match know users" and then under the advanced section of the firewall rule you apply the web profile you like 
 or create a single Firewall rule and a single Web policy that you will attach to this firewall rule and then edit and add proper groups inside the Web Policy by adding users/groups as shown below