This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Protection: Web Filtering

good afternoon
I have a similar configuration using sophos utm, but the following problem occurred
What if I want to use some IP without going through the webprotection to navigate, only allow in the application's firewall, can it be done?
It works, can someone give me an example please
thanks

This thread was automatically locked due to age.

Parents

0 jhon Charles over 3 years ago

I tried that but it doesn't let me navigate out and that's what I find super weird,
the idea was to leave a couple of servers free of the web proxy
and assign the ports on the firewall
But it's not working

my rules in the firewall are

    local network dns any

local network websurfin any

etc, I even tried to control by adding a time filter to it and it doesn't work either,
Can you help me please
thank you.

Reply

0 jhon Charles over 3 years ago

I tried that but it doesn't let me navigate out and that's what I find super weird,
the idea was to leave a couple of servers free of the web proxy
and assign the ports on the firewall
But it's not working

my rules in the firewall are

    local network dns any

local network websurfin any

etc, I even tried to control by adding a time filter to it and it doesn't work either,
Can you help me please
thank you.

Children

0 jhon Charles over 3 years ago in reply to jhon Charles
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch over 3 years ago in reply to jhon Charles

Ola,

seems that you did not MASQ the internal network.

If bypassing the proxy, there needs to be masquerading in place for the internal devices to be able to access the internet without proxy.

You will find this setting under "Network Protection / NAT / Masquerading"

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

0 jhon Charles over 3 years ago in reply to PhilippRusch

if it is added

The idea would be that the users who go through the proxy have a schedule eg
Monday to Friday
from 9 a.m. to 7 p.m.

and that after those the equipment is blocked

can you help me with an example
please
thank you.

0 PhilippRusch over 3 years ago in reply to jhon Charles

Does this mean MASQUERADING is working now? (This has nothing to do with a schedule / time table or whatever, the underlying network structure has to work correctly first, then we can add your "specials")

Can you please be so kind and answer the questions we are posing here?

It is extremely difficult to help you, if you are jumping from one thing to another.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

0 jhon Charles over 3 years ago in reply to PhilippRusch

yes it works perfect now
the machines that are not in the list within the proxy
they can navigate using firewall policies
thank you very much for your peace of mind

0 jhon Charles over 3 years ago in reply to jhon Charles

I'm from Chile and I find that sophos utm
it is a wonderful application
very friendly and very stable

0 PhilippRusch over 3 years ago in reply to jhon Charles

Greetings from Germany to Chile!

I am working with UTM firewalls since the early days, when the company was named Astaro. I like their GUI and they way objects are handled and so I am here, helping others a bit with their UTM setups, if my knowledge allows.

So back to your next question: how to have a time schedule for your proxy users?

First: you cannot use firewall rules for this purpose, because proxy-settings are applied before packetfilter-rules!

Have a look at Rule #2 here: https://community.sophos.com/utm-firewall/f/recommended-reads/22065/rulz

Second: there is a way to have time-based webfilter-policies, this is what you are looking for.

An example how to do this can be found here:

https://community.spiceworks.com/how_to/113219-how-to-create-sophos-time-based-policy

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

0 jhon Charles over 3 years ago in reply to PhilippRusch

thank you very much, the perfect example works,
set the hours and days, then assign a group of teams
and configure them by schedule
It works very well
Thank you very much from Chile, the application is fantastic.