Information Systems:Sophos Firewall - Allow/Block Lists
Overview
Sophos Web Protection (web filter) is a module and feature of the firewall that protects the network by preventing users from accessing malicious websites. The web filter mostly works through category blocking: websites are categorized by Sophos and categories are either allowed or blocked. There is then a domain whitelist for sites approved to be exempted from category blocking.
Note: It is important to note that the web filter is employed by the IT department as a security mechanism, and not done in the spirit of user control or productivity management.
Configuration
The web filter policies are evaluated in a top-down order, stopping on the first match. Therefore, the policies are set up in an increasingly restrictive manner from top to bottom, with the bottom being the most restrictive and acting as a catch-all. The order of evaluation is:
No Restriction Policy -> Admin/IT Policy -> Less Restrictive Policy -> More Restrictive Policy
Administration
How to whitelist/blacklist a website
In order to whitelist, or make a website accessible to users through the firewall we must first check to make sure the website is appropriate and safe. Then Log into superman.unipharm.com ( this is the access address for the sophos). On the left pane expand web protection , then click on web filtering .Click on the tab that says policies, form there choose the policy that relates to the user. The column that is defined as filter action allows changes to the policy. Click on the filter action for the policy you want to change,this will prompt a popup window. In this window the tab for webfiltering will allow you to specifically enter websites to allow or restrict. Once entered return to the left where the choice of webfiltering was selected and look for policy help desk. The policy help desk has three main fields to fill : URL. IP address, USER. IP address should already be populated, leave it as is, put the web url that you want to test into the URL portion, put the user name of the person who needs access and check if your policy update worked!
Notes
- The web filter policies and actions were completely reworked on 2020-10-21 by norwinu.
To-do
- Document the rest of the technical configuration
- Expand on the philosophy of the web filter