Sophos XG Firewall Web Interface Reference and Admin Guide v16.5

Select from the following:

• Web categories

• File types

• URL groups

Note: Categories are evaluated using ‘OR’. Only one category must return true in order to match traffic.

Tip: You can filter the type of categories to display by clicking Show: All and selecting a category type.

| Protect | 140

Figure 150: Add User Activity

Categories

With web categories, you can organize and classify domains in a container. The default categories define some common content types. You can use categories within policies to restrict access to websites.

Add Category

1. Go to Protect > Web > Categories and click Add.

2. Type a name.

3. Specify details.

Classification

Use classifications to group content types. Select from the following options:

• Productive

• Unproductive

• Acceptable

• Objectionable

Traffic Shaping Policy

If you want to apply a bandwidth restriction, choose a traffic shaping policy.

Configure Category

Specify domains and keywords for the category using a configuration type. Select from the following options:

• Local - Define domains and keywords that are specific to your organization. To import a domain or keyword list, click Choose File and select a text file. To create a domain or keyword list, type a domain or keyword in the Search/Add text box and click the Add button ( ).

• External URL Database - An external URL database contains a list of domains that is maintained by a third party. These include, for example, country-specific blacklists and opensource URL categorization lists. To specify an external URL database, type a URL in the

Search/Add text box and click

. The firewall checks for updates every two hours.

Acceptable formats: .tar, .gz, .bz, .bz2, and .txt

| Protect | 141

Figure 151: Add Category

4. Specify Advanced Settings.

Override Default Denied Message

Select this option to define a custom message that will be shown to the user when a website is blocked as a result of this category.

Figure 152: Advanced Settings

Related concepts

Firewall

on page 50

Firewall rules are security rule-sets to implement control over users, applications or network objects in an organization. Using the firewall rule, you can create blanket or specialized traffic transit rules based on the requirement. This page provides centralized management for the entire set of device firewall rules. Sophos XG