Sophos Intercept X - Unable to block a website via Website Management .

Greetings all, 

A very quick question regarding Sophos InterceptX. 

We set policy to block a website (e.g Google Drive), its partial successful blocked on Windows (on different ISP) but failed to block on MacOS. 

 

Use case Scenario 

---------------------

1) A windows laptop connected to our corporate network prohibited to block a website (e.g google drive), the user unable to access it with enforced policy. 

2) A windows laptop connected to external wifi and managed to login and view the website (e.g google drive), the user able to access it with enforced policy.

3) A MacOS desktop able to access a blacklisted website (e.g google drive) with policy enforced via our corporate network.

3) A MacOS desktop able to access a blacklisted website (e.g google drive) with policy enforced via external network. 

 

Does the website management cant block certain website with different OS or internet connection provider (ISP) ?

 

  • Hi  

    Would you please suggest on which browser you are trying to access the website? 

  • Website management shouldn't be affected by OS or ISP unless you're using an OS such as Linux that doesn't include Web Control.

    By chance are these machines using a web proxy?  It's possible that all web traffic is seen with a destination of a proxy and can't properly determine where its going.  Traffic while internal might not use the proxy?

  • Hi  

    I would suggest you check on Mac if Web Control functionality is working, please refer to this article and test via malware test page. 

  • In reply to Jasmin:

    We trying on few major internet browser :-

    1. Internet Explorer , Edge

    2. Google Chrome

    3. Mozilla Firefox

    4. Safari 

  • In reply to MEric:

    So far there is no web proxy run behind the process. All the device need to enroll before the policy take over ?

  • In reply to Alique Wong:

    Hi  

    Have you applied any firewall rule to block it from firewall end? 

    QUIC protocol used by google for faster response time bypasses the web control of the AVs as they work on the application layer whereas the firewall blocks the traffic on the network layer.