Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Subscribers 15 subscribers
  • Views 15987 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Order of Precedence

SophosNewby

Does Sophos Intercept X have precendence over rules and policies on XG firewall?

Here is the scenario: Sophos Intercept X client policies are configured to "WARN" users regarding Streaming media content, if I have an application rule on the XG for "Google Video Streaming" to only be allowed during breaks and lunch through a schedule will the this rule be superceded in favor of simply allowing the user to acknowledge the "WARN" message to allow streaming anyway.



This thread was automatically locked due to age.
Parents
  • +1

    Thank you for reaching the community forum. 

    Yes, So what will happen is that on your endpoint, if the policy is set to "warn" whenever the end users attempt to access the Streaming media content sites, provided that the policy is working perfectly, they’ll get the "Warn" alert. Once the end users acknowledge, the device will attempt to send the traffic to the Xg firewall, and the firewall will check the existing rule applied on the device. If accessed at the allowed time, then the request will proceed. The request will be denied and dropped if accessed during the restricted time. 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Reply
  • +1

    Thank you for reaching the community forum. 

    Yes, So what will happen is that on your endpoint, if the policy is set to "warn" whenever the end users attempt to access the Streaming media content sites, provided that the policy is working perfectly, they’ll get the "Warn" alert. Once the end users acknowledge, the device will attempt to send the traffic to the Xg firewall, and the firewall will check the existing rule applied on the device. If accessed at the allowed time, then the request will proceed. The request will be denied and dropped if accessed during the restricted time. 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Children
Unfiltered HTML