Skip to content

Server Web Control Policy

Web Control lets you restrict access to certain categories of website.


All servers to which this policy applies will use a Server Advanced license.

Go to My Products > Server > Policies to apply web control.

To set up a policy, do as follows:

  • Create a Web Control policy. See Create or Edit a Policy.
  • Open the policy's Settings tab and configure it as described below. Make sure the policy is turned on.


If you updated a policy but it's not behaving as expected, clear the browser cache or cookies.

Website Controls

Select Website Controls to control access to websites that may be inappropriate.

For each website category, you can select:

  • Allow: Allows all websites in this category.
  • Warn: Warns the user that a website may be inappropriate.
  • Block: Blocks all websites in this category.

Log web control events

Select Log web control events to log attempts to visit blocked websites or websites for which we display a warning.


If you do not enable logging, only attempts to visit infected sites will be logged.

Control sites tagged in Website Management

You can put websites into your own custom categories ("tag" them) and then use a Web Control policy to control sites in each category.

To set this up, do as follows.

  1. Go to My Products > Global Settings > Website Management.
  2. Click Add.
  3. In Add Website Customization, enter a website and add a tag. You can either type in a new tag name, or select a tag you've used before (you'll see suggested tags when you start typing). Click Save.

    If you exclude a domain, then we automatically exclude all of its subdomains. For example, if you exclude this also excludes or

    You don't need to use any wildcards or special characters.

  4. Go to My Products > Endpoint or Server and click Policies.

  5. Under Web Control, select a policy.
  6. Click the Settings tab.
  7. Turn on Control sites tagged in Website Management.
  8. Click Add New on the right of the page.
  9. In Add Website Tag, do as follows.

    • Select the website tag you created.
    • Choose the Action you want to take against websites.
    • Click Save.
  10. On the Settings tab, click Save.

For more information on how Sophos filters websites see Sophos Web Security and Control Test Site.