This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Time Based web filter policies not working

Hello folks,

I have just moved from sophos Home SG to XG, I used to able to use time based web filtering policies. I understand I can do here as well for some reason I cant see them working. I have a default policy which allows all traffic I have then created a new policy which denies access to games/advertisement etc between certain times of the day during the week. I have added specific user to the policy because I want to target specific users not all.

This policy does not seem to work. I had setup similar sort of policy in SG and it used to work perfectly fine. Is there anyone who can tell me what I am doing wrong or how should this be done.

Thanks - Alam

This thread was automatically locked due to age.

Parents

0 lferrara over 7 years ago

Alam,

can you share your Policy Rules?

Also you should have posted the thread inside XG forum.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 7 years ago in reply to lferrara

Hi lferrara

I should have sorry posted it in the wrong place :( can i move it or shall i start again
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HammerRodx

Hammer,

a moderator will move the thread to the right place.

Anyway the first policy is matching live users. Can you open that policy and share screenshots?

If users are not authenticated in some way, the first policy will never been hitted. Also pay attention to use any.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 7 years ago in reply to lferrara

Hi

I was testing so changed that to any user, I have changed it back now, I have added myself in users. I have a client installed on my laptop for authentication in theory it should block me on my laptop on the VM i have no authentication method so I should bypass as you said. But that doesn't seem to be the case i can by pass either way

PolicySH.zip
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HammerRodx

Hammer,

I can only see Scheduled Time but nothing about Web or Application Filter applied and the action (allow or drop). Also are you hitting correctly the scheduled time? I mean we are not into weekend yet.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 7 years ago in reply to HammerRodx

Hammer,

I can only see Scheduled Time but nothing about Web or Application Filter applied and the action (allow or drop). Also are you hitting correctly the scheduled time? I mean we are not into weekend yet.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 HammerRodx over 7 years ago in reply to lferrara

Hi,

No snipping tool on the VM..... I have managed to do it
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HammerRodx

What do you see inside the logs?

Also can you share your scheduled time item?
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 7 years ago in reply to lferrara

I was just about to send it :) SXGP.zip
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 7 years ago in reply to lferrara
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 7 years ago in reply to HammerRodx

Ok just had a look at the screen shot the second timing says only Sunday, just changed it back to weekdays results are the same still bypass
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HammerRodx

Inside the log, user is not authenticated, so the first rule will never match.

Username field is empty as you can see from the log.

You said you are using a client. On the Control Center you should see live users = 1.
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 7 years ago in reply to lferrara

I didn't notice that ...but yes in control center I see 1 user
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HammerRodx

Live users counter is 0.

Are you using Sophos Client Authentication Agent on your Computer? did you login inside it with the proper credential? You should see the orange icon and not a greyed out icon.
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 7 years ago in reply to lferrara

Not sure why it said 0 I have just checked again looks good
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HammerRodx

Have a look at Authentication log and see if your username is there. Change the policy where source is LAN, services are HTTP and HTTPS and try again.
Cancel
Vote Up 0 Vote Down

Cancel