On the Web Protection > Filtering Options > Websites tab you can maintain lists of sites for which you want to override the default category, reputation, or associate a tag with the site.
Each website can only match one entry from the website list. When adding CIDR ranges to the website list, only the closest match to the IP address in the URL will apply.
Here is an example:
Entry 1: Range is 10.0.0.0/8.
Entry 2: Range 10.2.2.0/24.
A request for 10.2.2.2 would only match the entry 10.2.2.0/24 and apply settings based on that entry. So, if you want to apply a tag for the whole 10.0.0.0/8 range, you must add the tag to both the 10.0.0.0/8 and 10.2.2.0/24 entries.
To add an entry to the Local Site List:
- Click the Add Site button.
Enter the sites you wish to override or tag.
The text box in the Add Local Site(s) dialog will accept URLs, domains, IP addresses, or CIDR ranges.
Note – An IP address or CIDR range in the website list is only effective if the request is specifically for the IP address in the URL.
Optionally, select the Include subdomains checkbox.
Selecting this checkbox will apply the overrides to all subdomains. For instance, if you add example.com and select the Include subdomains checkbox, mail.example.com will be included in the override.
Select a Category or Reputation to override.
You can override either Category, Reputation, or both. Sites defined in the Local Site List are processed by filter actions using these overridden values.
Select a Tag to associate with the sites.
You can click on the Plus icon to create a new tag or click on the Folder icon to choose from existing tags. Sites tagged here can be controlled by creating a Filter Action that references the tag.
- Optionally, add a comment.
For large lists of sites you can page through entries by using the Next and Previous icons at the top of the tab, or search for items using the search text box. To delete entries click the Delete icon next to the entry, or select multiple items and click the Delete icon at the top of the list.
Sites which have an associated tag can be controlled for blocked or allowed websites on the Web Protection > Web Filter Profiles > Filter Action > Websites tab, section Control sites tagged in the Website List.
Cross Reference – Find information about HTTP proxy site reclassification on Sophos UTM in the Sophos Knowledge Base.