Skip to content

Server: Web Control

Web Control lets you restrict access to certain categories of website.


Web Control settings apply only to Windows servers.

All servers to which this policy applies will use a Server Advanced license.

Website Controls

Select Website Controls to control access to websites that may be inappropriate.

For each website category, you can select:

  • Allow: Allows all websites in this category.
  • Warn: Warns the user that a website may be inappropriate.
  • Block: Blocks all websites in this category.

Log web control events

Click Log web control events to log attempts to visit blocked websites or websites for which we display a warning.

If you do not enable logging, only attempts to visit infected sites will be logged.

Control sites tagged in Website Management

You can put websites into your own custom categories ("tag" them) and then use a Web Control policy in Sophos Central Admin to control sites in each category.

To set this up, do as follows.

  1. For the template that you want to edit, click Global settings and then Website Management.
  2. Click Add.
  3. In Add Website Customization, enter a website, optionally select a category override, and add a tag. You can either type in a new tag name, or select a tag you've used before (you'll see suggested tags when you start typing).

    If you exclude a domain, then we automatically exclude all of its subdomains. For example, if you exclude this also excludes or

    You don't need to use any wildcards or special characters.

  4. Click Save.

  5. Go to Server Protection in Sophos Central Admin and select the policy you want to use the tag in.