... it's only useful to create exceptions to a Block rule.
Scott, we concluded in this thread that it seems impossible to create Allow exception for an application that uses HTTP/s (like Skype) for a specific source IP address unless it bypasses proxy completely:
Scott and vilic, I think that AppCtrl rules aren't considered until after all Firewall rules have been considered. That would mean that AppCtrl could block something allowed by Firewall rules, but not allow something already rejected earlier (refer to #2 in Rulz).
Can anyone confirm that? Can anyone confirm that AppCtrl also comes after IPS? Should I add AppCtrl and IPS to #2?
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
I am using Sophos UTM 9.2 and using web protection feature. Few months ago, I did try to Block and Allow Skype by Address or Username which is integrated with Active Directory but it is impossible.
Please help to configure this if Sophos has released new update to figure it out.
Tai, I moved your post into your original thread. The easiest way to find one of your old threads is to click on your member name in a post and select 'Find all posts by ...'.
Did you already try the following in Application Control? [LIST=1]Allow Skype from "External (Address)"
Block Skype from Any
[/LIST] And then configure the SOCKS5 Proxy in the UTM and in the Skype clients for those whom you want to allow.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
I did try with that configuration, and also an Engineer from Sophos Distributor in Vietnam helped to check but it doesn't work. Is it possible to get your help to configure by remote?
One more thing, what if we want to allow specific users use other application such as youtube, onedrive, ... how to allow it?
