Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
I blocked the adult and nudity category in my sophos xgs 2100 firewall.
But still many porn sites are accessible.
Is there any way to block it completely?
Chirag
Click "Diagnostics" > Select "Policy Tester"
Once in Policy Tester, test to see which firewall rule, which Web Policy is being applied to the traffic as you may have this misconfigured:
As you can see above, this is blocked and identifed the Web Category that sees this site. You can try http:// and https:// in case you have separated your firewall rules to HTTP and HTTPS services.
Ensure in your firewall rules as well as mentioned already, that you are set with the following checks in place:
Block QUIC can be very important as well to avoid Google Chromes attempts to bypass firewall protections.
Also...be sure to join the Sophos DNS Protection EAP, and get protection at the DNS level for this by adding to your DNS forwarders on the firewall and/or on your DNS servers.
Chirag
Click "Diagnostics" > Select "Policy Tester"
Once in Policy Tester, test to see which firewall rule, which Web Policy is being applied to the traffic as you may have this misconfigured:
As you can see above, this is blocked and identifed the Web Category that sees this site. You can try http:// and https:// in case you have separated your firewall rules to HTTP and HTTPS services.
Ensure in your firewall rules as well as mentioned already, that you are set with the following checks in place:
Block QUIC can be very important as well to avoid Google Chromes attempts to bypass firewall protections.
Also...be sure to join the Sophos DNS Protection EAP, and get protection at the DNS level for this by adding to your DNS forwarders on the firewall and/or on your DNS servers.
