Hello community, while migrating a Sophos SG to Sophos XGS, I was wondering wheter it is possible to add the defined web exceptions to a web filter policy? So that the exceptions only count for firewall rules with the appropriate web filter policy…

hello i need to open microsoft website (for office 2021 activation and such) for every user i have i used the web exception to allow them but noticed that if a user is not present in any firewall rule , the exception don't apply is this normal…

On a XG(S) Firewall the default exception rule "Legacy HTTPS Exceptions" is not in regex notation. Example: When you enable this rule, not only dropbox.com is not decrypted, but also for example secure-dropbox.com People with bad ideas can register…

Hi, We recently deployed a couple of XGS107w units (SFOS 19.0.0 GA-Build317) and have been unable thus far to configure them to allow client devices to connect to ESET servers for updates and LiveGrid. The only filtering enabled on these routers are…

Hello, I need to create a authentication exception in XG for the webproxy. There is one internet rule, that is applying a webpolicy, this rule requires authentication. Additionally in the webpolices, users are also configured. Webproxy configured within…

hello I have an xg210 and im trying to allow the activation of office 2021 i added all the urls in the web exception , and gave allow all to a specific ip to test , still it is not working nothing is shown as blocked in the logs edit : when…

Hello friends, I have a question i hope that can help me. I have a web filter policy to Video Hosting category. It works fine, but now i want to allow youtube access, i made the exception following this steps: Login to Firewall Web Admin > Click…

Is there a way to import the O365 exception file to the firewalls via Sophos Central? The tar file is usually imported from the Import tab in the backup/Firmware section of XG GUI which is not available in the sophos central thanks SC

XGS4500 (SFOS 18.5.3 MR-3-Build408) Since new this device has duplicate Exceptions (example below), there are 5 of them. There is what looks like a factory one (no delete option) and a second one with 'Original' After the name. I cannot delete the one…

Hello, I have some users on my LAN trying to update their MacBooks pro (everyone with the HTTPS decrypt enabled), but they are having troubles. Can someone tell which https decryption exception should I add, so they can update their MacBooks? And…

We have a URL Filtering Exception for all apple.com traffic. See below. ^([A-Za-z0-9.-]*\.)?apple\.com\.?/ Is it possible to craft/recreate the above to apply the exception to all apple.com traffic except music.apple.com ? Therefore blocking music…

Hello, Once that a policy checks exception has been created, can I ignore this same exception for a specific group by a firewall rule (it can be by a IP Range, IP list, networks, Host Group, by selecting an entire in interface... it doesnt 'matter)…

Hi everyone, I'm new to the XG and I'm running into an issue allowing an EXE download without any browser warnings. I first created an exception using under "web" --> "exceptions" that included a regex: ^([A-Za-z0-9.-]*\.)?lumension\.com/ However…

So does anyone know if Sophos keeps this list updated when you download it ? Also , what happens if you have already uploaded it ? Does it only import the news ones if there are or does it duplicate it ? https://support.sophos.com/support/s/article…

Hi All, I try to add subnet network in Web exception, but it (example: 203.104.150.0/24 ) didn't work. So I have to bypass the subnet network in top firewall rule. Is there any way to bypass subnet network in Web exception? Shunze

SFVH (SFOS 18.5.1 MR-1-Build326) I found an old post that listed things to add to the web content exceptions. I noticed the third one in their list was missing from the exception that was apparently included in the appliance defaults, so I cloned…

In my home LAN I have an XG-125w with SFOS 18.5. My MacBook Pro had a corrupted disk so I had to erase it and do an internet reinstall of MacOS. This procedure downloads a new copy of the operating system and then installs it. To get started, I made a…

Hi. I have a rule for cut the acces on the internet for some pc's, but I need to configure my sophos to upgrade operating system and Windosw defender. I tried whith this list, but doesn't work, any idea or sugestion, please? ^.*windowsupdate\.microsoft…

Hello Everyone, We've had requests to block websites that contain Cyrillic characters, however whenever I attempt to do so in the Sophos interface it states it's an invalid URL. To avoid posting the full domain of the malicious site, an excerpt…

hi, i want to block all web sites to my users and allow certain website. for this i created allowed URL list in URL Group, called that URL group in web policy and then called that policy in Firewall policy. how can i allow anydesk and skype using web…

After implementing SFOS 18.5.1 I discovered Microsoft QUick Assist would not complete a connection, it just showed a rotating dots image. SFOS Log Viewer showed the Firewall blocked the application with Invalid Traffic. Sharing the Web Exceptions for…

Is there a recommend practice here to whitelist ? In the same way as you would add Hosts/subnets to make it easy to add/update, which would apply to any changes made in Firewall/SSLVPN etc.... does it make sense to create "exceptions" to websites, rather…