Setting General Options

On this page, the available features are:

  • On a standalone web appliance: all options.
  • On a joined web appliance: cache settings only.
  • On a management appliance: all options except for cache settings.

Use the Configuration > Global Policy > General Options page to set web appliance policy-related filtering options.

Cache settings

  • To enable caching, click On on the Cache settings panel.
    Note Caching is off by default. With the exception of large file downloads, setting Caching to Off results in higher performance.
  • To disable caching, click Off on the Cache settings panel.
  • To change the cache settings, on the Cache settings panel, enter the size in bytes of the Maximum cacheable object size and the Minimum cacheable object size in the appropriate text boxes, and click Apply.
    Note The default cache settings (maximum 100,000,000 bytes, minimum 100,000 bytes) are usually optimal. Lowering the setting for Minimum cacheable object size will decrease the performance of your web appliance.


To enable sharing of data, including sample files, with Sophos that will help improve the protection provided by your web appliance, select the SophosLabs check box, and click Apply.
Note Sample files will be sent to Sophos for additional threat analysis. Learn more about sample submission.

Logging Mode

To exclude user name and IP information (if, for example, gathering this information is illegal in your jurisdiction), in the appliance logs and reports, clear the Logging mode check box, and click Apply.

Note Please ensure that it is legal to record user-identifiable data in your jurisdiction before enabling this feature, as recording such data is illegal in certain jurisdictions.
Note If the Logging mode check box is cleared, several reports will always show "No Data": Reports > Policy & Content > Suspect Machines and reports in the Reports > Users section. All searches will show "No Data" as well.

Report data retention

In the Report data retention text box, set the number of months for which you want to retain data. If the new retention time is shorter than the previously configured time, you will lose any data that is older than the new retention time.

Google feature controls

Configure settings that limit access to certain Google services.

  • To limit YouTube content when viewing videos, select the YouTube content restrictions check box. Access to restricted content can be controlled with YouTube settings in Google Apps.
  • With Control Google Apps access, you can prevent users from signing in to Google services using any accounts other than the accounts you provided them with. For example, you may not want them to use their personal Gmail account from another domain. To limit access to Google accounts and services to only the domains you specify, select the Control Google Apps access check box and type one or more domains.
    Note Google feature controls are not available for Endpoint web control.

Certificate cache

To clear the HTTPS scanning certificate cache, click Clear Certificate Cache. This removes any certificates on the disk used to sign HTTPS requests.

Additional options

  • To allow users to access external sites by entering IP addresses, select the Allow public IP access check box, and click Apply.
    CAUTION If this option is not enabled, users will be unable to access any URL that uses an IP address from any web page, flash script, or other content. For example, flash videos commonly contain URLs encoded as IP addresses.
  • To enforce search engine filtering (SafeSearch), select the Enforce Search Engine Filtering (SafeSearch) check box, and click Apply.
    Some search engines provide a “SafeSearch” option that excludes inappropriate content from search results. The appliance can enforce this option for search engines that support it. Check the product documentation for your search engine to see if SafeSearch is supported and for details about this feature.
    Note The effectiveness of this option depends on the implementation of SafeSearch by your search engine.

    When this option is enabled, users cannot override SafeSearch by changing settings in their search engines.

    Note In order to support SafeSearch, some search engines require HTTPS scanning to be turned on.
  • Select Restrict image results to openly licensed content to limit image results to those that have been labeled as being free to share, modify and reuse.