Sophos Endpoint Protection: Whitelist a complete URL

Hi Dirk Sandmann ,

Thank you for reaching out to the Sophos Community forum.

Upon checking, it appears that it’s mandatory to allow https://google.com/ to also allow access to https://google.com/recaptcha/.

As a workaround, if you want to limit access or the usage of google.com, you may also adjust or configure the "Acceptable web usage" within your Web Control policy and block/allow specific categories. Does this help?

Hi Gladys,

unfortunatly it doesn't work.

But we find out, you can block google.com and allow google.com/recaptcha when you activate SSL Interception.

regards

Dirk

Only with inspection can be endpoint see the full URL, without inspection, the address seen is limited to the SNI in the client hello part of the handshake.