Sophos Central - Block parent domain, allow sub domain.

Question

Hi, 
 I'm looking at a way to allow a subdomain but block the parent domain. 
 To add more context, i want to stop staff signing in to WeTransfer using personal accounts. 
 With an Pro account you can create a custom domain. 
 So i want to block wetransfer.com but allow company.wetransfer.com 
 I am trying to do this with a web policy within EndPoint Protection via allow and block lists using the website management within Global Settings. 
 
 Adding both domains, seems random it doesn't work, one overides the other, tried wildcards but not supported, done some Googling and found reference to Regex but doesn't seem to be supported anymore. 
 
 Any suggestions how i can do this? 
 
 I did look for a Sophos Central community forum but doesnt seem to exist anymore? 
 
 I could consider blocking with the XG firewall, but this doesn't help users working remotely. 
 
 Thanks.

GlennSen · Answer

Hi SaladFingers , 
 You can achieve this by creating two entries on website management. You can tag wetransfer.com as a block and override its category as "alcohol and tobacco" For "company.wetransfer.com" tag as allowed then override its category as "Busines". 
 
 On your Web control policy, You need to add those tags on the policy where those target machines are currently using.

Sophos Central - Block parent domain, allow sub domain.

Top Replies