Sophos - Blocking access to specific users/group

[zebulunn]

Hi Guys/Gals

 

I'm using Sophos Management Appliance to make some changes to our proxy and I can't seem to figure out how to block specific websites to a member group in AD.

 

What I tried so far was to create a new AD group, apply it to a test account and then find that group in Sophos to create a policy group and tag.

After this I tagged youtube with the new group to block it. I thought this was fairly simple but the test account can still access this site.

 

Am I missing/not understanding something or should I do this task another way?

 

We have to keep youtube open for "It's a great teaching resource!" but now getting requests to ban naughty kids.

 

Thanks, I'm about 6 months into my first job so this is all learning for me. Tbh I'm surprised the school didn't have such a policy already.

[IWDave]

We use Sophos Web Appliance also. We create "Additional Policies", then pick the AD group or users and then block or allow a TAG which the website has been given. Edited January 31, 2014 by IWDave

[zebulunn]

We use Sophos Web Appliance also. We create "Additional Policies", then pick the AD group or users and then block or allow a TAG which the website has been given.

Yes, this is what I've tried to do. I made a 'Deny Youtube' additional policy, placed it higher than staff and students default policies and selected my AD group when setting it up. Then I wrote a new tag for it to use. Is this where I went wrong? As when I was going to block a website as usual my new tag didn't appear in the list.

[IWDave]

"Policies are executed in the priority order specified below." - I read that as it needs to be lower down the list, so it says (1) everyone can access youtube (2) except for bob

[IWDave]

I've just gone through the motions.

 

• Add a local site
  
  • youtube.com
    
  • tag it as YouTube
    

   

  [*]Add additional policy

  • Add Users to block
    
  • Set TAG as YouTube
    
  • Select Block
    
  • Name Policy as Block You Tube
    

 

Its then the priority page, I understand it as action1,action2,action 3 and so on.

[zebulunn]

I've just gone through the motions.

 

• Add a local site
  
  • youtube.com
    
  • tag it as YouTube
    

   

  [*]Add additional policy

  • Add Users to block
    
  • Set TAG as YouTube
    
  • Select Block
    
  • Name Policy as Block You Tube
    

 

Its then the priority page, I understand it as action1,action2,action 3 and so on.

 

It was probably the priority, after moving it lower I got a successful block.

 

Thanks for the run through!

[IWDave]

YAY - You're welcome :-)