This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filtering 2 additional networks?

Ok, quick question about web filtering.

When you enable web filtering in the global tab, what networks do you put in here?

For most people, it will be the LAN.

Now suppose you have another 2 LAN's that you want filtered and with different authentication?

Do you just add these in the web filtering profile tab with the appropriate authentication eg AD SSO?

 

or do you add all 3 networks to the global tab with "none" as authentication
and then add the 3 networks again under web profiles and adjust each one to the authentication you want eg profile 1 = AD SSO, profile 2 = none, profile 3 = AD SSO



This thread was automatically locked due to age.
Parents
  • Hi Louis,

    Yes, as you can see in the global tab for web filtering, it states "default web filter profile" which will be active when all the other explicit filter profiles are set off. Configure a default filter method for all the networks here, the profile that is then configured in the Web Filter Profiles section will have higher priority than the default profiles.

    Thanks 

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • So basically,

    you put ALL of the networks eg LAN, GUEST LAN that you want filtered into the global tab and leave out any network you don't want filtered.

    For the networks that you put in the global tab, that becomes you base filter.
    You then add further filter profiles in the filter tab that build upon this eg your LAN but with AD SSO authentication, Your GUEST LAN with no authentication etc

Reply
  • So basically,

    you put ALL of the networks eg LAN, GUEST LAN that you want filtered into the global tab and leave out any network you don't want filtered.

    For the networks that you put in the global tab, that becomes you base filter.
    You then add further filter profiles in the filter tab that build upon this eg your LAN but with AD SSO authentication, Your GUEST LAN with no authentication etc

Children
  • Louis, the diagram on the first tab of 'Web Filtering Profiles' is worth studying a bit.  The IP/network determines which Profile applies to a request.  Inside the Profile, if you have authentication, Policies determine which Users/Groups are assigned which filter.

    If you don't use authentication, you're stuck with using different Profiles based on IP/network. If your IP is fixed at 172.21.1.51, you can assign yourself a personal profile as long as the Profile for your IP is above the Profile for 172.21.1.0/24.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA