Applying tags lets you set policy rules more simply and flexibly than is possible by using other
policy features.You can use the Local Site List to apply one or more tags to a URL. With Additional
Policies, you can set what action is taken in response to a tag.
Dynamic Categorization
Sophos provides the ability to block attempts by your users to evade policy controls through
anonymizing proxies and caching websites by automatically detecting such sites with the Dynamic
Categorization feature.
Data Leakage Prevention
You can secure your users against leaking vital data through web use by using the Data Leakage
Prevention features to selectively block them from sending webmail messages and posting on
blogs.
Related concepts
on page 74
on page 101
2.7 Endpoint Web Control
Sophos Web Appliances can perform filtering for URLs and file types at the network gateway.
Sophos Enterprise Console allows you to extend some of this same capability via Sophos Endpoint
Security and Control, filtering 14 essential site categories on endpoint machines.
By combining a Sophos Web Appliance with Sophos Enterprise Console, however, your
organization can take advantage of features that both products have to offer. Once you have
configured them to work together, you can apply a full web control policy with more than 50 site
categories to each user machine by way of Endpoint Security and Control.
Endpoint machines then communicate with the designated Web Appliance or Sophos Management
Appliance, receiving policy updates and sending back web activity reports to the appliance and
web events to Enterprise Console. Optionally, you can grant users the ability to receive policy
updates and send web activity reports through a cloud service during periods when users are
disconnected from the your corporate network.
As illustrated below, Enterprise Console can enable endpoint web control using three different
methods.
50 | Getting Started | Sophos Web Appliance
