Sophos Central Intercept X HTTPS Web control

The current version displays messages in the browser for HTTP sites, e.g. Blocked, Warn, etc..  

For HTTPS sites, no "in browser" message is displayed as the endpoint doesn't do inspection of encrypted traffic it just uses the Server Name Indicator (SNI) value of the handshake establishment to obtain the domain for lookup purposes.

The version which is coming to EAP soon does full inspection at the endpoint and can perform in browser messaging.

Information on that that is covered here:

Important Changes to the Endpoint/Server Protection and EDR Features Early Access Program - Announcements - Endpoint EAP - Sophos Community

Thanks!

The current version displays messages in the browser for HTTP sites, e.g. Blocked, Warn, etc..  

For HTTPS sites, no "in browser" message is displayed as the endpoint doesn't do inspection of encrypted traffic it just uses the Server Name Indicator (SNI) value of the handshake establishment to obtain the domain for lookup purposes.

The version which is coming to EAP soon does full inspection at the endpoint and can perform in browser messaging.

Information on that that is covered here:

Important Changes to the Endpoint/Server Protection and EDR Features Early Access Program - Announcements - Endpoint EAP - Sophos Community

Thanks!