endpoint firewall control

Question

Can I use the firewall rules in the sophos endpoint to control what websites my users visit ? 
 eg. block malicious websites before my users are hit with malware etc ..... 
 
 there are firewall policies in the enterprise console, does it helps in controlling malicious websites ?

jak · Accepted Answer

Hi, 
 In theory it is possible, in practice that is going to create a lot of work, plus the Sophos endpoint solution has other features which are designed to do just that. 
 Web Control - This allows you to block/allow certain sites. This can also block by category. 
 Web Protection - designed to block access to known malicious websites based on cloud lookups. Content scanning (part of Web Protection) also scans content before it hits the browser as in effect it proxies traffic locally. More recently there is also reputation checking of files as downloaded by the browser. community.sophos.com/.../121800. Malicious traffic detection also notes processes making connections to known bad sites. community.sophos.com/.../121607 
 Regards, 
 Jak