How to block youtube for a particular IP range in Sophos XG

Hi, You will need two rules, one with allow time and the other with block time. You will need to make sure that the ip address range does not appear in any other firewall rules.

Thanks rfcat_vk , will try and let know 

how about blocking youtube for this ip range at all times , would that be achieved as well with these rules ?

Most certainly can but you will need to reduce the traffic access to HTTP/s and block QUIC using the web proxy and policies.

Ian

ohh , that flew over my head , pretty new to Sophos XG , appreciate if you can share any screen shots , thanks mate

Hi,

please review the following link and some of the embedded links. There are also a number of KBA's you should read at the top of the forum.

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/137737/sophos-firewall-home

Ian

Thanks Ian , will check it out and keep posted, much appreciated 

Hi Ruka,

when you create your firewalls and they don't work as expected, please post expanded screenshots of the rules and the edited logviewer entries showing the failure.

Ian

Hi Ian,

Please find attached Firewall rule and Web and App Policy createdSophos block youtube FW rule screen shots.docx

Hi,

Please include them your post, not as seperate documents, makes the thread easier for all to follow.

Why does LAN 4 which appears to be the internet access have an IP address in the internal network. What interface does the Unifi AP connect to?

Ian

Hi Ian, 

ISP cable connects to Port 2



Unifi AP Connects to Port 4



IP Range for Port 4 is 



Wanting to block this IP Range



Web Policy created



Application Policy created 

Firewall rule created 

When I enabled this Firewall , Internet is disabled for all wifi users on 10.1.1.1/24