Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 29 subscribers
  • Views 9624 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block all websites using https when Decrypt & Scan HTTPS is enabled

buzz buzz

Hi everyone!

I have problem with the feature Decrypt & Scan HTTPS is checked.

The situation is this, I am blocking facebook and youtube during office hours and to be able to block also facebook and youtube mobile apps I enable the Decrypt & Scan HTTPS on the firewall but the problem is that all websites using https also are blocked like google.com and etc.

How can I block facebook and youtube mobile apps without affecting desktop browser who uses other websites like google, wikipedia, amazon and etc.?

Anyway I am using XG Firewall.

 

Thanks,

buzz



This thread was automatically locked due to age.
  • +1

    Hi Sir,

    Good day

    Let me try to give an advise, hope it may help you

    1. If your problems are blocking youtube and facebook thru mobile phones
     - Simply Block these URL into web policy and untick the decrypt and scan 
     -As I tested this, When using mobile you must need to clear all the cache data in your mobile phone to adapt the block policy 

    2. When you enable decrypt and scan, you must add certificate from sophos firewall into your browser

    PS.
    I'm also a newbie 

    Muchas Gracias

       

  • 0

    You must import Sophos CA Certificate into your browsers and reboot pc

  • 0

    Hi Buzz,

    you don't need to use the Web Protection Module for blocking youtube and Facebook i suggest to give a try with App control.

    you could build a rule like this and apply it to a Network Rule "Wifi to WAN" allow Any, MASQ, App Control -> Block Youtube + Facebook

    you can assign a custom timeframe like "Working Hours" to that App Control Policy

     

    Yours Lukas