About the skiplist, the IP in the list will not be managed by webfilter and others apps, this IP can access all without management of web protection.
About Socks5, I don't know why it does not work, even configure in Internet Explorer. Could you please helpt to instruct the configuration for UTM and clients? Thanks a lot
Till today, I believed that Sophos UTM - Application Control does not work as advertising, I am really upset about this. I did try to contact Vilic, and Bob by message in this forum but it seems difficult to reply the true because Sophos UTM cannot provide this.
In addition, I've worked with Distributor of Sophos, one of their technician have worked with me for a month, finally he still not able to allow the Skype for some ip address/users.
I like to use Sophos before but I'm really upset from the support, the function is not as expecting and they stopped support. Now I may try to move forward to another product because Sophos UTM is not good any more, the real feature is not work as their advertising.
Hope this will not make any competitive, I just want to share with you what I get while I work with Sophos Support.
AppCtrl rules are ordered, just like Firewall rules. To allow some users, make a rule above the general one, allowing Skype for a Network group containing the IPs of the users allowed to go there. If you've followed DNS Best Practice, that group can contain DNS Hosts for your users like "Username.domain.local" - does that do what you need?
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
it seems that you still not understand what I explained before. I have worked with your guys and created the rules. It still not work. If it's easy as you said, I don't need support from Sophos. Can you discuss with the ones who supported me for more infos? they are Bob and Vilic.,
Let me try to summarize our conclusions so far about this Skype problem (correct me if I am wrong somewhere):
Since it is kind of P2P application it is impossible to identify and control it using firewall rules with static domains or IP address lists. Application control is the only choice.
Skype uses SSL for communication, so the traffic is intercepted with Web filtering policy working in Transparent mode.
Web proxy changes the original client IP with UTM public IP address, so Application control module doesn't see the client's IP address (this is the core of the problem).
If you put a client IP in transparent host skiplist, Application control works but then all client traffic is not controlled by Web filtering.
