Sophos XG Help

[richbrowncardiff]

Hi All,

 

Over half term installing our Sophos box and new connection. So far mostly all good in testing but one thing I can't seem to find simply is how to quickly block a url on the XG appliance.

 

The in built categories are ok but obviously we need to add urls to a block list as and when required.

 

any advice much appreciated.

[Jamman960]

Assuming it’s the same as cyberoam you’ll need to create a custom category containing your blocked addresses

[richbrowncardiff]

Thanks Yes your right, Tested and working. Cheers

[richbrowncardiff]

Using the Xg is quite a challenge in our place. YouTube seems to be excessively restricted with safe search on. Any idea how / if I can allow more through? We don’t use google apps so no accounts although logged in with a personal account as a test and can’t override

[Jamman960]

We recently(over half term) upgraded ours from Cyberoam firmware to Sophos OS/XG firmware v17 and have experienced the same - until now Youtube hadn't been included in the safesearch feature which is handled well by the search engines and only affects the dodgy material however youtube filters a good portion of the content under "restricted" mode - I've disabled forced safe search for now as google still defaults to safesearch and our pupils(Nursery to Y8) aren't likely to realise its been changed or have a reason to change it.

 

Another issue to be aware of on V17 is lockups - our firewall stopped passing all traffic on Tuesday night until I rebooted it, now they've released 17.0.1 MR1 - I'd upgrade to this as soon as you can.

 

James

[jamesp]

Hi All,

 

Over half term installing our Sophos box and new connection. So far mostly all good in testing but one thing I can't seem to find simply is how to quickly block a url on the XG appliance.

 

The in built categories are ok but obviously we need to add urls to a block list as and when required.

 

any advice much appreciated.

 

Hi Richard,

To be honest the best way to do this would be to create a URL group and then use this in your policy - this way you can create a few specific white lists as well as Block lists.

 

Once created you can use them in your policy and assign Allow/Warn/Block as you would do with a cat.

 

This way its a little more manageable than spinning custom categories and under one tab for visible & quick access.

 

Hope that helps

 

James

[Techie2000]

Sorry to drag up an old post - did you end up doing anything about the YouTube restrictions? We're getting numerous complaints about how many videos are being blocked by the YouTube SafeSearch function but not sure if it's worth us disabling on the XG and going down the DNS route instead?

[synaesthesia]

Use DNS to force safesearch, which you can do locally or in the DNS section of the XG.

[Arthur]

We're getting numerous complaints about how many videos are being blocked by the YouTube SafeSearch function but not sure if it's worth us disabling on the XG and going down the DNS route instead?

Go the DNS route. That's what I did since it gives you more control compared to the XG.

[Techie2000]

By any chance could someone post a screenshot of their Sophos DNS entries for YouTube/ Google? I have tried adding a wildcard but for some reason my XG isn't liking it!

[synaesthesia]

Never, ever use wildcards on a Sophos box

 

Edited May 30, 2018 by synaesthesia

[Techie2000]

Fab, thank you