This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block youtube for a particular IP range in Sophos XG

Ruka 4 months ago

Hi everyone,

Firstly let me explain the setup i have for my home network

Have WAN plugged into a mini PC which runs Sophos XG. On Interface 4 of Mini PC i have plugged in ubiquiti AP from which other devices get wifi connection ( mobile phone , laptop etc )

The IP range i have assigned for Port 4 is 10.1.1.10/24

What I'm trying to achieve is to test and block youtube for wifi users , also would like to limit internet speed / usage after 7pm on weekdays

Please advise if its possible with the setup i have

Please include screen shots of rules if possible

Unable to upload any from my end cos im at work

Keep up the good work on the discussions , very helpful

Thanks

Raju George

Melbourne

This thread was automatically locked due to age.

Top Replies

rfcat_vk 4 months ago +1 suggested

Hi, You will need two rules, one with allow time and the other with block time. You will need to make sure that the ip address range does not appear in any other firewall rules.

0 rfcat_vk 4 months ago

Hi, You will need two rules, one with allow time and the other with block time. You will need to make sure that the ip address range does not appear in any other firewall rules.

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Ruka 4 months ago in reply to rfcat_vk

Thanks rfcat_vk , will try and let know

how about blocking youtube for this ip range at all times , would that be achieved as well with these rules ?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 4 months ago in reply to Ruka

Most certainly can but you will need to reduce the traffic access to HTTP/s and block QUIC using the web proxy and policies.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruka 4 months ago in reply to rfcat_vk

ohh , that flew over my head , pretty new to Sophos XG , appreciate if you can share any screen shots , thanks mate
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 4 months ago in reply to Ruka

Hi,

please review the following link and some of the embedded links. There are also a number of KBA's you should read at the top of the forum.

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/137737/sophos-firewall-home

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Ruka 4 months ago in reply to rfcat_vk

Thanks Ian , will check it out and keep posted, much appreciated
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 4 months ago in reply to Ruka

Hi Ruka,

when you create your firewalls and they don't work as expected, please post expanded screenshots of the rules and the edited logviewer entries showing the failure.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruka 4 months ago in reply to rfcat_vk

Hi Ian,

Please find attached Firewall rule and Web and App Policy createdSophos block youtube FW rule screen shots.docx
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 4 months ago in reply to Ruka

Hi,

Please include them your post, not as seperate documents, makes the thread easier for all to follow.

Why does LAN 4 which appears to be the internet access have an IP address in the internal network. What interface does the Unifi AP connect to?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruka 4 months ago in reply to rfcat_vk

Hi Ian,

ISP cable connects to Port 2

Unifi AP Connects to Port 4

IP Range for Port 4 is

Wanting to block this IP Range

Web Policy created

Application Policy created

Firewall rule created

When I enabled this Firewall , Internet is disabled for all wifi users on 10.1.1.1/24
Cancel
Vote Up 0 Vote Down

Cancel