cannot use ip range in the web proxy allowed list

I dont think you can do it in a CIDR format, you have to use regex format: https://community.sophos.com/kb/en-us/120839

but that's for the excepcion list, it's not what i want, i'm talking about the ALLOWED NETWORKS on the global/per profile configuration

but that's for the excepcion list, it's not what i want, i'm talking about the ALLOWED NETWORKS on the global/per profile configuration

What ranges do you want  to add, I checked on my UTM and was able to go to Web Protection -> Web Filter Profiles -> Filter Profiles -> Allowed Networks (just so were in same place)

The I clicked +

Selected Type: Network

IPv4 Address: 192.168.1.0/24 (example)

And was able to add it.

that's a network definition, i'm talking about address range definition, not network.

Got ya, yeah that's a lot of IP addresses to add, you have that many clients?

it's a unique need in which a customer has to control their network via IP ranges, no other was is feasible and NOW i find out that those ranges are pretty much useless

I am still pretty new considering some of the help you can find here, I'd hold out to see if someone else knows more before I got to worried.

How are you adding all those to the interface?

¿adding the ranges?, you add htose in definition just like any other definition.

for now i ended up converting the ranges to CIDR notation and adding them as networks and grouping, it's still messy as hell and horrible from management standpoint (some ranges required 4 to 5 notations, for 9 IPs...)

Yea that sucks, its awfully quiet in here, maybe that is the only way.  

Mast, you know that Network Range definitions are new.  I don't use them anywhere as I don't trust them yet.  I'm not surprised they don't work in Web Filtering.  I think the solution you're using is the best one available.

You might check Ideas to see if there's a suggestion that you can vote for.  Let us know the link if you find one.

Cheers - Bob

they're not new at this point they've been around for more than 2 years(i found a 2017 thread with this same issue).

I also found the idea thread, from 2016 and completely ignored

I waited over two years to start recommending Sandstorm, so my reputation as a curmudgeon is well established! ;-)

Still, Sophos should fix this bug/Lücke.

Cheers - Bob