allow specific sites and block all other sites in Sophos

Question

hello 
 I'm using Sophos Central, to block any other site except I allowed in > "settings" > "web management" and "tagged As" ( allow ) 
 and when I create a new role under "web control" and under " Control sites tagged in Website Management " and i added new ( allow ) and the role is enforced 
 BUT the users can access any site normally ?? how is that

Qoosh · Answer

In regards to the points you mentioned. 
 1. It isn't necessary to use both "Tag" and "Category Override." We recommend using one or the other when controlling website access. 
 2. HTTPS websites will not return the "Website Blocked" page in the web browser. Further information is present in the link below. - How to check if web Control is working 
 3. Within the FAQ document, the section " Why are some exemptions not behaving as expected when accessed over HTTPS? " elaborates further. 
 In general, if you're looking to restrict web access on your environment so that ALL websites are blocked, but only the ones you specify are allowed, I would recommend using an XG device to perform this sort of filtering. The XG is also able to inject the "Blocked" page regardless of the site being HTTP or HTTPS. 
 Sophos' Web Control component is not intended to be used in the same fashion. With that being said, some significant changes are coming to Sophos' Web Control component in the coming months. I recommend enrolling a test device in the Early Access Program titled "New Endpoint Protection Features." 
 This may allow for more robust filtering to take place, which could accomplish what you're looking for. Let me know if your results improve when testing out the EAP.

allow specific sites and block all other sites in Sophos

Top Replies