Applicable Version: 15.01.0 onwards Overview The Web Protection module in Sophos Firewall (SF) provides the Administrator with a comprehensive URL Database that can organize websites into a multitude of Web Categories. It allows Administrators to apply access restriction policies to users based on these categories. SF also allows administrators to create custom categories that only consist of a few websites or block a few specific websites. Note: Even if you are NOT subscribed to the Web Protection Module, SF allows administrators to block specific manually-defined websites or groups of websites through the use of custom web categories. Scenario Block access to a particular website. In this article, we have blocked access to the website www.facebook.com for: All the users on the network Selected User/User Group Note: Other websites can be blocked in a similar manner. Configuration You must be logged in to the Admin Console as an administrator with Read-Write permissions for the relevant feature(s). Step 1: Create a Custom Web Category Create a Custom Web Category for www.facebook.com. To create a web category, go to Objects > Content > Custom Web Category or Protection > Web Protection > Custom Web Category and click Add to create a new category, as shown below. Click Save to save the custom web category. Step 2: Create a Web Filter Policy to Block Facebook Go to Objects > Policies > Web Filter or Protection > Web Protection > Web Filter Policies and click Add to create a new Web Filter Policy named BlockFacebook . Click Save to save the Web Filter Policy. Step 3: Configure Rules for the Web Filter Policy Select the BlockFacebook Policy created in step 2 and click Add to add a Web Filter Policy Rule with the following parameters. Click Add to add a rule to the policy with the following parameters. Parameters Value Description Category Type Web Category Select the Category Type that the rule is to be added to. Category Facebook You can also search for the category name in the provided search box. HTTP Action HTTPS Action Deny Select the HTTP and HTTPS action. Schedule All the time Select the Schedule for selected categories. Click Add to add the rule to the policy. Click Save to save the policy. Step 4: Apply the Policy to a Firewall Rule or User/User Group For all the users in the network You can apply the policy from Policies so that it is applied to all traffic that matches the rule. To create a Rule, go to Policies and click +Add Firewall Rule . Apply the Policy created in step 3 as shown below. Click Save to save the policy. Selected User/User Group You can apply the policies to individual users or user groups. As an example, we have applied the policies to a user named John Smith and a group named Marketing. Individual applications of the rule can also be implemented in the same way. Go to Policies and click + Add Firewall Rule to create a new User/Network rule. Apply the Policy created in step 3 as shown below. Click Save to save the policy. Document Version: 1.0 – 05 October, 2015 123304
↧