Working with Sophos web filter

General discussions about Little Snitch
BrianCanFixIT
Posts: 1
Joined: Sun Nov 05, 2017 5:42 pm

Working with Sophos web filter

Postby BrianCanFixIT » Sun Nov 05, 2017 5:56 pm

When the following Sophos Web Filtering option is enabled some web traffic may not work:
Control access to websites using a policy set by your administrator. This feature helps your organization minimize concerns around inappropriate content and productivity.

The fix is similar to the preyproject workaround:
1) Launch the Little Snitch configuration from the console as the "_sophos" user:

Code: Select all

sudo -u _sophos /Applications/Little\ Snitch\ Configuration.app/Contents/MacOS/Little\ Snitch\ Configuration

2) Continue through the setup guide
3) Open Little Snitch Preferences -> Security -> "Click the lock to make changes -> enter your admin credentials -> Check the "Allow Global rule editing" checkbox -> close the preferences window.
4) Click on "All Rules", search for "sophosweb" in the search window, then Select the entry for "SophosWebIntelligence.bundle"
5) Delete any deny rules, and set the rule to allow traffic as desired, it should look something like the image below.
Imagehttps://imgur.com/pMAF2jB
6) Close Little Snitch Configuration.
7) Open up Little Snitch configuration for your user and repeat the process above.

chrisrosa
Posts: 1
Joined: Wed Dec 20, 2017 10:29 pm

Re: Working with Sophos web filter

Postby chrisrosa » Wed Dec 20, 2017 10:32 pm

Big thanks for the help with this. Particularly frustrating because it was only an issue on one of three systems that are configured nearly the same. In the _sophos user I had a bunch of denies for some reason...no idea how those got there. Then the global allow all. Deleting the denies did the trick.

Thanks again.

koppenhoefer
Posts: 7
Joined: Wed Dec 23, 2015 1:47 pm

Re: Working with Sophos web filter

Postby koppenhoefer » Wed Jun 13, 2018 5:49 pm

This solution doesn't work for me.
I have LS blocking connections to FB, YT, etc. when on the work network.
But on the home network... which activates my home profile... I have the allowAll enabled. But no joy,.. with Sophos Web filtering enabled and LS filtering enable,.. I get no more access to web sites <sigh>. Anyone one else in the same boat as me?.. with LS 4.1 on 10.12.6

Curiously,.. SOME web sites *do* actually work.. like google.com
But most sites I visit from the google search results then get blocked despite allowing SophosWebIntelligence.bundle an "Allow any outgoing connection".

My solution, for now, is sadly to turn off Sophos Web blocking... or to enable it, but disable LS filtering.


thanks for any suggestions


Return to “Little Snitch General”

Who is online

Users browsing this forum: No registered users and 2 guests