zebulunn Posted January 31, 2014 Posted January 31, 2014 Hi Guys/Gals I'm using Sophos Management Appliance to make some changes to our proxy and I can't seem to figure out how to block specific websites to a member group in AD. What I tried so far was to create a new AD group, apply it to a test account and then find that group in Sophos to create a policy group and tag. After this I tagged youtube with the new group to block it. I thought this was fairly simple but the test account can still access this site. Am I missing/not understanding something or should I do this task another way? We have to keep youtube open for "It's a great teaching resource!" but now getting requests to ban naughty kids. Thanks, I'm about 6 months into my first job so this is all learning for me. Tbh I'm surprised the school didn't have such a policy already.
IWDave Posted January 31, 2014 Posted January 31, 2014 (edited) We use Sophos Web Appliance also. We create "Additional Policies", then pick the AD group or users and then block or allow a TAG which the website has been given. Edited January 31, 2014 by IWDave
zebulunn Posted January 31, 2014 Author Posted January 31, 2014 We use Sophos Web Appliance also. We create "Additional Policies", then pick the AD group or users and then block or allow a TAG which the website has been given. Yes, this is what I've tried to do. I made a 'Deny Youtube' additional policy, placed it higher than staff and students default policies and selected my AD group when setting it up. Then I wrote a new tag for it to use. Is this where I went wrong? As when I was going to block a website as usual my new tag didn't appear in the list.
IWDave Posted January 31, 2014 Posted January 31, 2014 "Policies are executed in the priority order specified below." - I read that as it needs to be lower down the list, so it says (1) everyone can access youtube (2) except for bob
IWDave Posted January 31, 2014 Posted January 31, 2014 I've just gone through the motions. Add a local site youtube.com tag it as YouTube [*]Add additional policy Add Users to block Set TAG as YouTube Select Block Name Policy as Block You Tube Its then the priority page, I understand it as action1,action2,action 3 and so on.
zebulunn Posted January 31, 2014 Author Posted January 31, 2014 I've just gone through the motions. Add a local site youtube.com tag it as YouTube [*]Add additional policy Add Users to block Set TAG as YouTube Select Block Name Policy as Block You Tube Its then the priority page, I understand it as action1,action2,action 3 and so on. It was probably the priority, after moving it lower I got a successful block. Thanks for the run through!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now