Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment.

Overview

This article explains how to block Gmail except for a certain Google domain. Users can no longer access their private Gmail accounts and can only log onto Gmail for a custom domain.

This applies to the following Sophos products and versions:

Sophos Firewall [SFOS v18.5, v19.0 & v19.5]. The following sections are covered:

Add a firewall rule

1. Navigate to Protect>Rules and Policies
2. Click the +Add Firewall rule or edit an existing one.

3. Ensure that under the Security features, the HTTP/HTTPS scanning is turned on and that a web Policy is in use.

Note: This rule can be applied to any existing policy; admins don’t need to create a new policy.

Allow Custom Google Domain

1. Navigate to Web > Policies.
2. Edit the web policy used in the firewall rule above.
3. Open the Advanced Settings option at the bottom of the policy edit screen.
4. Enable Restrict login domains for Google Apps by checking the box.

5. Next, Enter the domain(s) to be allowed to access GoogleApps in the "Allowed domain(s)"
6. More information regarding “Add a web policy” & “Add a rule to a web policy.”

Note: Certificate Authority is needed to be installed in the user's computers to avoid certificate warnings.

I hope this article has helped you achieve your requirement!

Updated Disclaimer
[edited by: Erick Jan at 2:02 PM (GMT -7) on 17 Apr 2023]