Blocking all websites but one for single user

Hello Walter,

May we know what Sophos product you're currently using? Is it Sophos endpoint or Sophos firewall? What was the link to the website? was it accessible via the internet or via intranet? Have you tried accessing the website on a different browser or incognito? 

Sophos Central is what we are using. 

https://powergridservices.kpaehs.com/

You access it via the internet. Yes, same issue in any browser even in incognito.

Looking into the "developer options" of the chrome browser, or using something like WireShark may help with this. It will allow you to check if there are any other websites being contacted to present the login page you are accessing. 

Taking a brief look, I can see the following sites are also being contacted when the sign-in page loads to name a few.
- assets.kapehs.com
- uploads.kapehs.com
- maxcdn.bootstrapcd.com
- gstatic.com

I've added those sites but still have the same issue. Do I need to add an * or something to include all websites attached. Like *assests.kapehs.com*

Do you have a device that does not have network restrictions on it, so that you can do a comparison of what the traffic looks like when the browser is behaving normally vs abnormally? 

If you'd like assistance in looking into the network capture, I recommend opening a case with our support team so that we can take a closer look. 

I was able to make it work, but I had to allow Business and Search Engines. Everything else is blocked. Thanks for the help.

That one website probably references multiple other websites in order to display properly. Pulling in CSS, pulling in Javascript, etc. So you basically need to go into your web browser's Web Inspector (or whatever it's called, part of the Developer tools) and see which sites are red in the page. Some of them will be ads and beacons, but some will be important for the website. Add them one at a time to your allowed list until the page displays properly.

ya thanks as i also got some solution.