This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web filtter profile by host

I'm looking to see if anyone has any pointers in how to add web filters by host.

My utm is not using ad.  The hosts that I care about are manually mapped to ip addresses. (DHCP reservation in ms dhcp).

I want to be able to create groups with hosts that I can apply filters to. (Kids iTouch and laptops).
I also want to be able to apply Internet use times based on hosts and groups.

In looking at the web filter settings.  I don't see a method of applying to a host. I want to leave the default profile to all and create a new profile for the kids.  What am I missing?

It has to be by host... I have a lot of devices that are not part of AD.

Suggestions?

This thread was automatically locked due to age.

0 ChrisBaksa over 9 years ago in reply to Scott_Klassen

They are DHCP reservations.  They can't change.
I also tested on a host that has a static IP.  It gets the kids profile as well.

Am I doing this correct?  Does it look right to you?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

There's no point in activating the "Kids iPods" Policy in the default profile in 'Web Filtering'. You didn't show us a picture of the 'Policies' tab for the "Kids iPods" Profile - are you sure the "Kids Pods" Policy is activated there? Show a line from the Web Filtering log file for one of your accesses and one for one of your kids' devices.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisBaksa over 9 years ago

That was it Bob.

I turned off the "Kids iPhone" policy under "Web Protection - Web Filtering - Policies" and only enabled it the "Web Protection - Web Filter Profiles - Filter Profiles" section.

I tested it across multiple hosts and it works as required.

Thanks everyone for the help.

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Glad you got it.

One caveat though, if you are using the UTM for DHCP, it does not do true reservations. Static Mappings MUST be outside the scope of DHCP offered IPs, otherwise the UTM may offer the same IP to two different devices (one with a static mapping for an IP and the other for some other device without static mapping)..

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisBaksa over 9 years ago

DHCP is managed by my MS 2012 dhcp servers.
UTM does do dhcp for the wireless guest network. But these devices will never be on that.
Thanks again for the help.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Cool beans. Wanted to let you know just in case. [:)]

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel