Excluding emails from network quota surfing

Hi Anesu,

Thank you for reaching out to Sophos Community.

Kindly create a firewall policy with a network quota and "add exclusion" for the source, destination, services, and ports for sending and receiving emails.

For Add exclusion reference, you may check the following KB

• Add a firewall rule

Thank you

Here we already have a rule that is allowing users to the internet. with match known users. so do we create the exclusion on the same rule, or we create another rule above or below .

Hi Anesu,

This can be done in both ways,

Option 1.:

Create a separate Rule allowing email traffic and services and placing it before the surfing quota FW rule.

• Pro: this won’t hinder your email services as the firewall will read the allow rule (email traffic) first before the surfing quota
• cons: Two firewall rules

Option 2:

Adding the email traffic and services in the exclusion of the Surfing quota firewall rule.

Hi Anesu,

This can be done in both ways,

Option 1.:

Create a separate Rule allowing email traffic and services and placing it before the surfing quota FW rule.

• Pro: this won’t hinder your email services as the firewall will read the allow rule (email traffic) first before the surfing quota
• cons: Two firewall rules

Option 2:

Adding the email traffic and services in the exclusion of the Surfing quota firewall rule.