Sophos XG Firewall allow http download

Hello Simplified Sam ,

Thank you for reaching out to the community, you can allow the http download from the web policy, for the reference you can see the screenshot below:
PROTECT > Web > Policies > Edit web policy


And if failed to understand your query, please elaborate your requirernemnt you are trying to achieve. 

Is this possible to archieve this through web exceptions? Since i am used to them, and they are global atleast.

Or do web exceptions have higher impact on performance? (Since regex can slow down you XG)

Would be the best choise to make my own category "Allow HTTP download" and add there my domains like download.arduino.com?

Exception will be global, best choice would be to make your own category refer the article reference - Allow/block websites using custom categories and/or URL groups

Global is okay, since i am filtering it anyways.

Could you provide me a example url with the correct pattern for HTTP? Without much impact on performance?

normally i would do ^downloads\.arduino\.com/? in the web exception, but how can i get http there to work?

you can use: ^([A-Za-z0-9.-]*\.)?downloads\.arduino\.cc/
Under the PROTECT > Web > Exception > Add

Thanks for the answer, but i think i tried this couple months ago, but i will try it again.
(If i rember correctly web exception applied only on https and not http.)

And you should not use "([A-Za-z0-9.-]*\.)" if you dont need too, since it cause more traffic as ^downloads\., atleast thats what the last staff member told me where i had processor performance issues.

Thanks for the answer, but i think i tried this couple months ago, but i will try it again.
(If i rember correctly web exception applied only on https and not http.)

And you should not use "([A-Za-z0-9.-]*\.)" if you dont need too, since it cause more traffic as ^downloads\., atleast thats what the last staff member told me where i had processor performance issues.

exceptions gives you the ability to match the criteria, so for http website you can also use the single IP, reference screenshot: