This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XGS - How to make an Exception for unauthenticated users

Hello,

on my old UTM i got an exception which gave web access to unauthenticated users to several domains like microsoft.com or windowsupdate.com.

How is that possible on xgs? The Webfilter does not contain an exception for authentication.

This thread was automatically locked due to age.

Top Replies

LHerzog 11 months ago in reply to Vivek Jagad +2 verified

If I understand the question correctly, you want "devices" to access those URL. So that would be a classic network firewall rule with no authentication enabled. allow network A to *.microsoft.com port…

Parents

0 Vivek Jagad 11 months ago

Hello Ingo Buyny ,

Thank you for reaching out to the community, you can Add a single clientless user. You can refer also refer the best practices for clientless user.
Additionally, the General exceptions tab will work for all the users.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
+1 LHerzog 11 months ago in reply to Vivek Jagad

If I understand the question correctly, you want "devices" to access those URL. So that would be a classic network firewall rule with no authentication enabled.

allow network A to *.microsoft.com port 443

similar to the screenshot, or course with wildcard FQDN as destination
Cancel
Vote Up +2 Vote Down

Cancel
0 LuCar Toni 11 months ago in reply to LHerzog

Essentially SFOS does not support unauthenticated requests, as the requests has to be sorted before that.

Therefore you need to create a wildcard firewall Rule for microsoft without Authentication. It essentially lead to the same.

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Reply

0 LuCar Toni 11 months ago in reply to LHerzog

Essentially SFOS does not support unauthenticated requests, as the requests has to be sorted before that.

Therefore you need to create a wildcard firewall Rule for microsoft without Authentication. It essentially lead to the same.

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Children

No Data