Application filter is not working

Question

Dears 
 I have a problem with my XG-Sophos application filter, I created an application control policy to prevent X-VPN, Thunder VPN and VPN Lighter apps , but still those apps allowed, when i check the log viewer i found them allowed

rfcat_vk · Answer

Hi, 
 I see a number odfissues with your setup. 
 1/. you do not need a linked NAT 
 2/. you need to use HTTP and HTTPS and not your services list which is an open firewall rule 
 3/. you are not decrypting https 
 4/, you do not appear to have installed the XG CA on your devices. 
 Ian

rfcat_vk · Answer

You need to add an exception in web exceptions. The application policy works well. Or you could delete WhatsApp from your policy. 
 You cannot just turn on a policy an expect it work, you need to be able to test the traffic and limit the applications ability to bypass your rules. 
 When you understand that you will have less issues with blocking Applications etc from accessing the internet. If you do not want setup an exception you can create a firewall rule that allows access to only the WhatsApp sites for specific users. 
 ian

Application filter is not working

Top Replies