XG Web filtering policy not working

Hi,

Where on the firewall list does your guest rule sit? What did you include in your guest policy? Sounds like your guest policy is all encompassing not specific?

Ian

Rule was grouped with the Traffic to WAN rule at #2, here's the web filter policy. Policy is just  tweak to the default policy, blocked streaming, P2P and other high bandwidth applications. 

Hi Hugh,

thank you of rthe policy screen. Your firewall rues sounds like it has a  issue with the VLAN configuration? How do guests connect the VLAN, Please post a copy of your interface configuration is expanded mode.

Ian

Guest connect via wifi and are assigned IP address by DHCP

Is it a Sophos AP or 3ed party AP? Do guest users receive an IP address in the VLANs range?

Ian

This is a Sophos APX120 AP, yes guest receive IP address from the VLAN. Once the rule I created is disable they are able to get to captive portal, enter password and then browse. IF I enable to rule then they're unable to browse. 

Hello Hugh Miller1,

This seems like an issue with firewall rule ordering. If LAN and Guest LAN are in same zone, please check the firewall rule ordering and move as you wish to prioritize the traffic.

Firewall rule with following information should be reorder and move to bottom.

Source zone: LAN

Source networks: Any

Destination zones: WAN

Destination networks: Any

Hello NM_1987, this rule is already at the bottom. It's the last rule and my guest rule is #2.