Sophos XGS Webfilter and Sophos Central Webfilter

Question

hello, 
 How does a computer behave when it is in the firewall network but is also supposed to use and utilize various web policies via Sophos Endpoint Protection? The firewall also has a web filter that has been rolled out to different users and PCs. How can I connect the two without the web filter of the firewall and the web filter of Sophos Central interfering with each other? 
 Thank You!

Michael Dunn · Accepted Answer

This works fine and many customers are doing it. Each system is independent. Outgoing request Browser --> Endpoint --> XG --> Website Incoming response Browser <-- Endpoint <-- XG <-- Website Lets say that both the endpoint and xg are configured with a policy to block adult sites. The endpoint is the first thing that sees the request. It categorizes it as Adult and blocks. The block is performed by Endpoint. XG never sees the request so it doesn't log anything. Now in a different scenario lets say the Browser downloads a file that contains a virus. There is nothing wrong in the outgoing request, both the endpoint and XG allow it out. When the incoming response occurs the file is first sent to the XG which scans it. The XG detects the virus and blocks it, changing the response to a block page (which is sent to endpoint and then browser). In this case the block is performed by XG. Endpoint never saw the file so it did does not log there was a virus. In general if the policy is roughly the same, outgoing request blocks are done by Endpoint and incoming response content blocks are done by XG - because those systems are "first" in those directions. This does mean you might need to look at the logs of both. I do not know much about Sophos Central but there may be something that helps there.

Sophos XGS Webfilter and Sophos Central Webfilter

Top Replies