This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

cannot use ip range in the web proxy allowed list

Hello,

i need to configure the web proxy based on SEVERAL IP ranges as allowed network list, but when i try to drag those ranges it does not allow me.

so as a workaround i created a network group and dragged the address range inside, so far so good but when i try to enable the policy it throws all kinds of errors in the bottom:

Web Protection → Web Filter Profiles → Filter Profiles:
The web filtering profile object cannot use range objects for the allowed network list attribute.

this is a very serious issue, essentially a system down condition as the system is unusable like this, ¿any idea how to make this work?, ¿or should i open a high priority support case?

something i would not even consider a workaround would be to define EACH IP in that range by hand and then group, but it's beyond idiotic as we're talking hundred of definitions and it's simply unacceptable.

This thread was automatically locked due to age.

0 Badrobot over 5 years ago

I dont think you can do it in a CIDR format, you have to use regex format: https://community.sophos.com/kb/en-us/120839

Respectfully,

Badrobot
Cancel
Vote Up 0 Vote Down

Cancel
0 Mast_01 over 5 years ago in reply to Badrobot

but that's for the excepcion list, it's not what i want, i'm talking about the ALLOWED NETWORKS on the global/per profile configuration
Cancel
Vote Up 0 Vote Down

Cancel
0 Badrobot over 5 years ago in reply to Mast_01

What ranges do you want to add, I checked on my UTM and was able to go to Web Protection -> Web Filter Profiles -> Filter Profiles -> Allowed Networks (just so were in same place)

The I clicked +

Selected Type: Network

IPv4 Address: 192.168.1.0/24 (example)

And was able to add it.

Respectfully,

Badrobot
Cancel
Vote Up 0 Vote Down

Cancel
0 Mast_01 over 5 years ago in reply to Badrobot

that's a network definition, i'm talking about address range definition, not network.
Cancel
Vote Up 0 Vote Down

Cancel
0 Badrobot over 5 years ago in reply to Mast_01

Got ya, yeah that's a lot of IP addresses to add, you have that many clients?

Respectfully,

Badrobot
Cancel
Vote Up 0 Vote Down

Cancel
0 Mast_01 over 5 years ago in reply to Badrobot

it's a unique need in which a customer has to control their network via IP ranges, no other was is feasible and NOW i find out that those ranges are pretty much useless
Cancel
Vote Up 0 Vote Down

Cancel
0 Badrobot over 5 years ago in reply to Mast_01

I am still pretty new considering some of the help you can find here, I'd hold out to see if someone else knows more before I got to worried.

How are you adding all those to the interface?

Respectfully,

Badrobot
Cancel
Vote Up 0 Vote Down

Cancel
+1 Mast_01 over 5 years ago in reply to Badrobot

¿adding the ranges?, you add htose in definition just like any other definition.

for now i ended up converting the ranges to CIDR notation and adding them as networks and grouping, it's still messy as hell and horrible from management standpoint (some ranges required 4 to 5 notations, for 9 IPs...)
Cancel
Vote Up 0 Vote Down

Cancel
0 Badrobot over 5 years ago in reply to Mast_01

Yea that sucks, its awfully quiet in here, maybe that is the only way.

Respectfully,

Badrobot
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to Mast_01

Mast, you know that Network Range definitions are new. I don't use them anywhere as I don't trust them yet. I'm not surprised they don't work in Web Filtering. I think the solution you're using is the best one available.

You might check Ideas to see if there's a suggestion that you can vote for. Let us know the link if you find one.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel