web policy block url is no work

Question

Hello 
 
 Im try to block a url used sophos firewall (Ver. 19.5.1) according to this KB 
 
 my config step is 
 1. Create a Web Categroy and add the url 
 2. Create a Web Policy and active block the category http / https 
 3. Create a Firewall Policy and apply the web policy 
 
 but still can access the url, seems not work

Erick Jan · Answer

Hi Rex, 
 Thank you for reaching out to Sophos Community. 
 Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue? 
 Kindly do a test policy on the very top of the FW policy with the Web policy? 
 Also, kindly share the log viewer, packet capture, and configuration upon testing.

Vivek Jagad · Answer

Can you share the web filter logs, which includes the url you are trying to block/access ? Can you also share the policy you have created and the url groups or the custom category and also how you are applying in the FW rule, have enable the scanning ? Also refer - HTTPS decrypt and scan FAQ .

Vivek Jagad · Answer

When you try to include the url with the slash in the custom category, If the text contains a slash (/), then it can only match the end of domain name and the beginning of the path. it is only possible to block specific pages within an HTTPS web site if you have configured your firewall to perform decryption of HTTPS content. Without decryption, the firewall can only act on the overall domain/hostname part of the URL. The detail path of the URL is only sent within the encrypted connection between the browser and the website.

Vivek Jagad · Answer

Hey Rex Yu , Well not necessary I was able to block the site in my environment: alliedtelesis.com | With a custom category keyword: Step1: Step2: Step3: Result: Under the web filter logs, you'll be able also see the logs:

web policy block url is no work

Top Replies