How to configure Google Application Control with the Sophos UTM

Related Product: Web Protection

Related Version: Since version 9.2

What is Google Application control?

The Sophos UTM provides a feature to enforce a policy and limit access to the Google App services for specific domains only. This feature is useful for administrators who need to limit Google App access to their company domains only, and prohibit users from accessing their personal Google Apps.

What to do

Where to Configure: Webadmin on https://<IP of UTM>:4444

Related Section: Web Protection | Web Filter Profiles | Filter Actions

Note:

• This feature is configurable per proxy Filter Action
• If this feature is enabled, the HTTP proxy in the Sophos UTM adds a special header to the App login request for Google
• The 'Decrypt and scan' option is required for 'HTTPS (SSL) traffic' for this feature to work

In our example below we use an existing filter action but the feature can also be enabled for new filter actions.

<![if !supportLists]>1.    <![endif]>In the 'Filter Actions' tab choose an existing policy to which Google Application control is to be configured.

<![if !supportLists]>2.    <![endif]>Click 'Edit' - The 'Edit Filter Action' window opens.

<![if !supportLists]>3.    <![endif]>Choose 'Additional Options'.

<![if !supportLists]>4.    <![endif]>In this window select the radio button 'Enforce allowed domains for Google Apps'.

<![if !supportLists]>5.    <![endif]>Click on the green coloured ‘+’ icon to specify the domains for which you wish to allow Google Apps

<![if !supportLists]>6.    <![endif]>Click 'Save'.

Google Apps access will now be allowed only for the domains specified above.