Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block specific search terms in Google/Bing XG Home

Hi all,

I have recently purchased an XG 125 rev3 and installed Sophos home on it.

I have been playing with the web filter and have found that it works very well for the most part. However, I have been unsuccessful in blocking specific search terms - specifically adult/explicit content - on search engines and image search. 

I tried using Web Proxy instead of DPI and enabling the "decrypt HTTPS using Web proxy" option but anytime I do that websites do not load properly. I would prefer to accomplish my goal using DPI if possible.

Here is my current configuration:

LAN to WAN Rules (Web Filtering):

New-Test-Policy:

I have tried creating new category filters using "naughty terns" and adding those to the web policies but that fails.

I have also tried adding category terms like so:

but it has also failed. 

From reading other posts I have read that I have to enable SSL/HTTPS Decryption? Can anyone provide some guidance as to how I can block specific search terms using DPI?

Thanks again.



This thread was automatically locked due to age.
Parents
  • Hi all and thank you for your answers.

    If I am understanding correctly in order for filtering to work the way I want it to I have to use Web proxy mode and also install the Sophos Certificate (CA) on all web browsers accessing the internet? 

    This doesn't seem very feasible in a home environment where there are many devices accessing the web. 

    I appreciate y'all's guidance and patience as I am new to the Sophos world. 

Reply
  • Hi all and thank you for your answers.

    If I am understanding correctly in order for filtering to work the way I want it to I have to use Web proxy mode and also install the Sophos Certificate (CA) on all web browsers accessing the internet? 

    This doesn't seem very feasible in a home environment where there are many devices accessing the web. 

    I appreciate y'all's guidance and patience as I am new to the Sophos world. 

Children
  • Hi,

    my experience with installing the CA in a home environment

    1/. Apple devices except Apple TV, easy and works without issues. You need to set trust level.

    2/. Microsoft - W11 installs but does not work well, edge fails to acknowledge the CA is installed.

    3/. Android - no experience

    4/. IoT devices most will not have a means of installing a CA, so you need seperate rules for IoT devices.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.