XG Web filtering policy not working

Hi,

Where on the firewall list does your guest rule sit? What did you include in your guest policy? Sounds like your guest policy is all encompassing not specific?

Ian

Rule was grouped with the Traffic to WAN rule at #2, here's the web filter policy. Policy is just  tweak to the default policy, blocked streaming, P2P and other high bandwidth applications. 

Hi Hugh,

thank you of rthe policy screen. Your firewall rues sounds like it has a  issue with the VLAN configuration? How do guests connect the VLAN, Please post a copy of your interface configuration is expanded mode.

Ian

Guest connect via wifi and are assigned IP address by DHCP

Guest connect via wifi and are assigned IP address by DHCP

Is it a Sophos AP or 3ed party AP? Do guest users receive an IP address in the VLANs range?

Ian

This is a Sophos APX120 AP, yes guest receive IP address from the VLAN. Once the rule I created is disable they are able to get to captive portal, enter password and then browse. IF I enable to rule then they're unable to browse.