This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM 9 - Block Specified URL on Network, Whitelist MAC Addresses

Hello all,

I have a Sophos SG 330 with UTM 9 and am trying to block access to a url ex. https://www.domain.com/page while not blocking the any other page on said domain.

That being said I also need to whitelist a few devices by MAC address or local IP to be able to access the URL without issue.

So far I have tried going to Filtering Options > Websites > New Site, added the URL, and tagged it with a 'blocked' tag. Then I went to Web Filter Profiles > Filter Actions > New Filter Action > Websites > Control sites tagged in the Website List, added the blocked tag, and changed the option to block.

Going into the Policy Helpdesk and testing the URL on one of the IPs where it shouldn't be accessible results in the following:

Do I need to remove that URL from the default Business category to prevent my Block action from being overwritten?

Would really appreciate any help I could get regarding this issue.

This thread was automatically locked due to age.

Parents

0 BAlfson over 2 years ago

Hi Daniel - welcome to the UTM Community!

Please insert a picture of the 'Websites' tab in your Filter Action.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Daniel K over 2 years ago in reply to BAlfson

Hello

Here is a picture of that:

I added the URL itself under the Block These Websites box and left blocked tag as Block but IPs that should have it blocked still test as allowed.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Daniel K over 2 years ago in reply to BAlfson

Hello

Here is a picture of that:

I added the URL itself under the Block These Websites box and left blocked tag as Block but IPs that should have it blocked still test as allowed.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Vivek Jagad over 2 years ago in reply to Daniel K

Hello Daniel K,

Can you check the logs while accessing the site...
tail -f /var/log/http.log >> and check which policy is being triggered ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel