Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 43 subscribers
  • Views 3399 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block specific search terms in Google/Bing XG Home

Kevin Roth

Hi all,

I have recently purchased an XG 125 rev3 and installed Sophos home on it.

I have been playing with the web filter and have found that it works very well for the most part. However, I have been unsuccessful in blocking specific search terms - specifically adult/explicit content - on search engines and image search. 

I tried using Web Proxy instead of DPI and enabling the "decrypt HTTPS using Web proxy" option but anytime I do that websites do not load properly. I would prefer to accomplish my goal using DPI if possible.

Here is my current configuration:

LAN to WAN Rules (Web Filtering):

New-Test-Policy:

I have tried creating new category filters using "naughty terns" and adding those to the web policies but that fails.

I have also tried adding category terms like so:

but it has also failed. 

From reading other posts I have read that I have to enable SSL/HTTPS Decryption? Can anyone provide some guidance as to how I can block specific search terms using DPI?

Thanks again.



This thread was automatically locked due to age.
Parents
  • 0

    Hi all and thank you for your answers.

    If I am understanding correctly in order for filtering to work the way I want it to I have to use Web proxy mode and also install the Sophos Certificate (CA) on all web browsers accessing the internet? 

    This doesn't seem very feasible in a home environment where there are many devices accessing the web. 

    I appreciate y'all's guidance and patience as I am new to the Sophos world. 

  • 0 in reply to Kevin Roth

    Hi,

    my experience with installing the CA in a home environment

    1/. Apple devices except Apple TV, easy and works without issues. You need to set trust level.

    2/. Microsoft - W11 installs but does not work well, edge fails to acknowledge the CA is installed.

    3/. Android - no experience

    4/. IoT devices most will not have a means of installing a CA, so you need seperate rules for IoT devices.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 EAP

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • 0 in reply to Kevin Roth

    Hi,

    my experience with installing the CA in a home environment

    1/. Apple devices except Apple TV, easy and works without issues. You need to set trust level.

    2/. Microsoft - W11 installs but does not work well, edge fails to acknowledge the CA is installed.

    3/. Android - no experience

    4/. IoT devices most will not have a means of installing a CA, so you need seperate rules for IoT devices.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 EAP

    If a post solves your question please use the 'Verify Answer' button.

Children
No Data
Unfiltered HTML