This article describes how web categorization works and how to lookup a URL.
As of SFOS v17 firmware, Sophos uses SXL as a classification service for web categorization. SXL is an efficient service that provide intelligent caching results locally to Sophos XG Firewall which minimize lookup queries and improve responsiveness.
Also, those web categorization results are integrated with SophosLabs, so sites found to be risky or malicious can be reclassified and prevented more quickly.
Applies to the following Sophos products and versions Sophos Firewall
The URL query can be invoked using the command line interface (CLI) or the graphical user interface (GUI).
Login to the CLI, select option 5. Device Management then option 3. Advanced Shell and run the following command:
nsxld -l <url>
This creates an instance to send a query to the SXL server. The response to this query does not contain any cached results or custom categories.
Go to Diagnostics > URL Category Lookup and enter the URL.
The response, when using the GUI, contains cache information and custom categories results if there is any.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.