diamondbyte.org

How to add custom lists to Sophos Firewall XG/XGS

1. On the sidebar go to Web then go to categories.
2. Click add.
3. Name it and select the classification you want (Default productive will work fine) then under configure category select External URL database.
4. In the search/add field paste the URL Without https://, only http:// it won't work.
5. Click save.
6. Go to polices.
7. Add or edit an existing policy.
8. Name the policy if creating it.
9. Add rule.
10. Remove all web traffic and click add new item.
11. In the dropdown select Web category.
12. Find and select the category created before.
13. Apply selected items.
14. Under action selected block HTTP and block HTTPS. Block HTTPS is the lock icon dropdown.
15. Change any other settings tou want then click save.
16. Apply changes.
17. On the sidebar go to Web then go to rules and polices.
18. Add firewall rule ==> new firewall rule.
19. Name it and leave action set to accept, log firewall traffic if ya want and select the rule position and rule group.
20. Set Source zones to the zone you want to enable this for.
21. Set Destination zones to WAN.
22. Leave Source networks and devices set to any and leave Destination networks set to any.
23. Scroll down to Security features and open Web filtering.
24. Select the policy created before, select the Malware and content scanning and the Filtering common web ports options you want.
25. Click save.