Web Filter profile not being applied or working.

Hello Hans PetterJacobsen ,

Thank you for reaching out to the community, create a new policy and follow the guide here: Sophos UTM: Block / Allow list editor.

Thanks for the suggestion but I have a block rule that doesn't block anything.

Their is another default filter that allows everything but the subnet that's only supposted to allow whitelisted sites is not inncluded Global Allowed Networks list.

We are uncertant when the rules stopped functioning as intended. 

When Disabling restricted profile the defined subnet is not able to brownse internet but ones enabling thay are even if all sites should be blocked by the rule. 

Can you capture the http.log under the /var/log directory and grab the client machine IP, example:
tail -f /var/log/http.log | grep <X.X.X.X> 

this will help which policy it detects and what's the status ! 

Can you capture the http.log under the /var/log directory and grab the client machine IP, example:
tail -f /var/log/http.log | grep <X.X.X.X> 

this will help which policy it detects and what's the status ! 

This is present in the exceptions="av,sandbox,content,url,mime,cache,fileextension"

Do the exceptions come from the Default Content Filter Action filter?  

I can't see where these exceptions are defined?

We have had the same rules many years and have only patched our virtual appliance.

Unfortantaly we are uncertant when the filter stopped working since only infrastructure servers use this role and we normaly don't browse using them.

Yes they act as a global, so if you visit Web Protection > Filtering Options > Exceptions > it should be present for the following requests:

Thank you .

It was one of the exceptions we have added.

Went thru every roll and disabled one by one until I found the one causing the problem