How to block youtube for a particular IP range in Sophos XG

Hi, You will need two rules, one with allow time and the other with block time. You will need to make sure that the ip address range does not appear in any other firewall rules.

Thanks rfcat_vk , will try and let know 

how about blocking youtube for this ip range at all times , would that be achieved as well with these rules ?

I believe I'm connected to Internet via Port 2 since WAN cable from ISP is connected to Port 2

Can we name two Ports with WAN label ?

The IP address on port 2 does not seem to be an address an ISP would assign you, more like something you have signed yourself.

Change port 2 to DHCP.

With your setup you would have 3 internal LAN ports and one WAN port.

What is your ISP/RSP?

Ian

Hi Ian , is it because i have Dynamic DNS as below 

Had created them for enabling Sophos Connect ( VPN ) 

My ISP is TPG  ( Fibre to Premise )

So, what has the vpn got to do with your internet connection or do you use it to access YouTube outside of Australia?

No , i dont access YouTube etc outside of Australia 

Was thinking if the Dynamic DNS config was an issue , so posted it

Please advise

No, there is something wrong with your connection. I will ask whirlpool about TPG FTTP IP addressing.

Ian

thanks mate

Sorry Ian , I missed a bit 

Cable from NBN box connects to WAN port of Tplink router and from LAN port of Tplink connects to Port 2 of Minipc which has Sophos XG installed on , which is why I believe Port 2 is getting 192.168.1  address

Sorry about the muck up 

Try plugging the XG directly into the NBN box, not using the TP-link.

Ian

Morning Ian ,

Sophos box does not pick up , which is why I had to use the tp-link

Morning Ian ,

Sophos box does not pick up , which is why I had to use the tp-link

You need to check the settings in the to-link because tpg I believe use VLANs.

ian

Thanks Ian , will check on it

If its VLAN , please advise what i should be checking with TPG to change it to

Else i can shop for other ISP who provides the requirement

Appreciate your assistance

TPG will not change their connection method, I use Aussie BB, they don't use any special connection methods. I suggest you check the whirlpool forums for advice on other ISP/RSPs.

Ian

Thanks Ian , will do , appreciate your help mate

Hi Ian,

Are you referring to such a setup 



Does all NBN NCD support this ? 

If i was to contact TPG , please advise what requirement should i be querying

Appreciate any tips

Thanks

Do search for TPG fttp configuration requirements.

Ian

As far as I can see, just plug the XG into port1 of the NBN box and wait for about 30 minutes after you have configured the XG for DHCP.

Ian

Hi Ian,

Plugging XG directly to NBN NCD did the trick , have entered PPPoE details and got it connected 

Have Ubiquiti AP connected to Port 4 , and wifi devices are connecting to it successfully as well

Please advise what's the best practise of configuring DHCP on XG

Also is it OK to choose "Obtain DNS from PPPoE"

Hi Ruka,

start using the IPS provided DNS until you find they do not meet your requirements.

Using XG for as the DHCP server, I am not sure best practice, but I use limited ranges because ZI don't have 200 devices on my network and use static addressing. The reason of the static addressing is so I can use clientless device management in firewall rules which makes device management easier because by changing group membership you can move devices into different rules within the same IP address range.

Ian

Thanks Ian

Back to my original question , please advise how I can block youtube on devices connecting to Port 4 ( Ubiquiti AP )