The XG Firewall has the ability to enforce SafeSearch and other features that some websites provide. XG does not perform the SafeSearch, it only ensures that the website’s feature is turned on and cannot be bypassed.
The following sections are covered:
Applies to the following Sophos products and versions Sophos Firewall Applicable Version: 16.X.X onwards
SafeSearch is a feature supported by several Search Engines. SafeSearch prohibits users from searching for websites containing explicit adult content. The Sophos XG can enforce that SafeSearch is turned on and cannot be turned off for the following Search Engines:
Additional image filters are done by turning on a filter for “creative commons license”. This tends to remove personal photos and screenshots, which reduces exposure to inappropriate images. The Sophos XG can enforce that image filters are turned on and cannot be turned off for the following Search Engines:
The YouTube website has the ability to turn Restricted Mode On or Off. The XG also has the ability to set the restriction level to Moderate and Strict. Turning on Restricted Mode on the website uses the Moderate level.
17.0 and 17.1, the Enforce SafeSearch setting will also enforce YouTube Restricted at the Strict level.
In 17.5 and later, the Enforce YouTube setting is separate, and an administrator can select either Moderate or Strict level.
For more information on the difference between Moderate and Strict, see the following link:
You must be logged in to the Admin Console as an administrator with Read-Write permission for relevant feature(s).
To enable HTTPS scanning:
Note: In 17.5 and later, it is not possible to enforce SafeSearch in the “Allow All” policy because it is not editable. In order to enforce SafeSearch, please create a new custom Allow All policy, edit the SafeSearch setting, and select that in your firewall rule
To enforce SafeSearch for v18, please see the Community post SafeSearch - Enforcement when using the DPI Engine.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.