[Updated KB for SFOS v17.5] Sophos XG Firewall: How to enforce SafeSearch

Hi Community,

The XG Firewall has the ability to enforce SafeSearch and other features that some websites provide. The XG does not perform the SafeSearch, it only ensures that the website’s feature is turned on and cannot be bypassed.

More configuration options and enforcement granularity for SearchSearch and YouTube has been added in SFOS v17.5.

Version support

  • v16.5 and prior: Web > General Settings > Enforce SafeSearch uses header method to enforce SafeSearch (requires HTTPS scanning).
  • v17.0 and v17.1: Web > General Settings > Enforce SafeSearch uses DNS method to enforce Google/Bing SafeSearch and YouTube restricted mode (does not require HTTPS scanning).
  • v17.5: Web > Policies > [Edit a Policy] Enforce SafeSearch and Enforce YouTube restrictions are configured separately and per policy.
    • Note: In v17.5 and later, it is not possible to enforce SafeSearch in the “Allow All” policy because it is not editable. In order to enforce SafeSearch, please create a new custom Allow All policy, edit the SafeSearch setting, and select that in your firewall rule

Please refer to the full KB article here.