Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Policy -> Allowed Network ->IP RANGE - Not working

Hi Sophos Community,

 

Under 9.4* UTM Firmware.

 

Under Web policy > Allowed Network > if set to IP range, It is not working.!

How come that this simple  features are not allowed on web policy?

Is there any Solutions for this?

Let say we have /22 Network, will i do manually input all hosts in the UTM just to apply web policy?

 

Thanks



This thread was automatically locked due to age.
Parents
  • It works, but you may not understand how filter profiles, policies, and filter actions work together.  Uou have not said whether you have an u wanted allow or unwanted block.

    Is traffic going through the web proxy or through the firewall rules?  If proxy, is user authenticated or not?     Which Filter Orofile and Policy is selected?  All of these answers are in the logs.  You meed to study them.

Reply
  • It works, but you may not understand how filter profiles, policies, and filter actions work together.  Uou have not said whether you have an u wanted allow or unwanted block.

    Is traffic going through the web proxy or through the firewall rules?  If proxy, is user authenticated or not?     Which Filter Orofile and Policy is selected?  All of these answers are in the logs.  You meed to study them.

Children
  • Under Transparent and standard mode
    If you are using IP range under Web Filter Profile, you cant drag the IP range into allowed network. 

    then 

    If you create another Network Group and Add the IP range then drag it to allowed network under Web filter Profile these will be the errors

     

    Web Protection → Web Filter Profiles → Filter Profiles:
    Proxy profile sources are missing. Continuing will disable this proxy profile.

    Web Protection → Web Filter Profiles → Filter Profiles:
    Removing 1 invalid element(s) 'REF_NetGroTestgroupr' from the list.

    Web Protection → Web Filter Profiles → Filter Profiles:
    The web filtering profile object cannot use range objects for the allowed network list attribute.

    Can you help me with this problem?
    Thank you

  • What is the definition of the "REF_NetGroTestgroupr" object that it doesn't like?  have you tried dragging other network objects and noticed that they do not generate an error?

  • Network Range definitions are relatively new, Kunkka, so I try to avoid them.  Range definitions are not supported in Web Filtering.  There might be a feature request in Ideas that you could vote for.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA