cannot use ip range in the web proxy allowed list

I dont think you can do it in a CIDR format, you have to use regex format: https://community.sophos.com/kb/en-us/120839

but that's for the excepcion list, it's not what i want, i'm talking about the ALLOWED NETWORKS on the global/per profile configuration

What ranges do you want  to add, I checked on my UTM and was able to go to Web Protection -> Web Filter Profiles -> Filter Profiles -> Allowed Networks (just so were in same place)

The I clicked +

Selected Type: Network

IPv4 Address: 192.168.1.0/24 (example)

And was able to add it.

that's a network definition, i'm talking about address range definition, not network.

Got ya, yeah that's a lot of IP addresses to add, you have that many clients?

it's a unique need in which a customer has to control their network via IP ranges, no other was is feasible and NOW i find out that those ranges are pretty much useless

I am still pretty new considering some of the help you can find here, I'd hold out to see if someone else knows more before I got to worried.

How are you adding all those to the interface?

¿adding the ranges?, you add htose in definition just like any other definition.

for now i ended up converting the ranges to CIDR notation and adding them as networks and grouping, it's still messy as hell and horrible from management standpoint (some ranges required 4 to 5 notations, for 9 IPs...)

Yea that sucks, its awfully quiet in here, maybe that is the only way.  

Mast, you know that Network Range definitions are new.  I don't use them anywhere as I don't trust them yet.  I'm not surprised they don't work in Web Filtering.  I think the solution you're using is the best one available.

You might check Ideas to see if there's a suggestion that you can vote for.  Let us know the link if you find one.

Cheers - Bob

Mast, you know that Network Range definitions are new.  I don't use them anywhere as I don't trust them yet.  I'm not surprised they don't work in Web Filtering.  I think the solution you're using is the best one available.

You might check Ideas to see if there's a suggestion that you can vote for.  Let us know the link if you find one.

Cheers - Bob

they're not new at this point they've been around for more than 2 years(i found a 2017 thread with this same issue).

I also found the idea thread, from 2016 and completely ignored

I waited over two years to start recommending Sandstorm, so my reputation as a curmudgeon is well established! ;-)

Still, Sophos should fix this bug/Lücke.

Cheers - Bob

the thing with sandstorm is that it's not part of any of the protection bundles or the fullguard bundle(which is kind of silly, considering that FG is supposed to have everything) sooo not a chance any customer is going to consider it(there's already hard to make them consider the regular bundles)

FullGuard Plus is the new bundle that includes Sandstorm.

Cheers - Bob