With the Mobile Denfense Policy, you can manage the Web Filtering feature of Sophos Intercept X for Mobile. This protects users from browsing sites with malicious, undesirable or illegal content.
Note: Web Filtering doesn’t work with Android Enterprise work profile devices. This is because Web Filtering requires the Sophos Accessibility Service, which is not available when Sophos Intercept X for Mobile is installed in the work profile.
The article will show you how to configure Web Filtering in Mobile Threat Defense policy and install Sophos Intercept X for Mobile on iOS devices. Sophos Intercept X for Mobile is a Mobile Threat Defense (MTD) solution for Android, iPhone or iPad devices.
Step 1: Log in to Sophos Central. In the My Products section, select Mobile.
Go to Configure > Policies > iOS & IPad > Create > Mobile Defense policy.
In Edit Policy:
Name: Enter the name of the Policy you want
Click Add Configuration.
In Basic Configurations select Web Filtering.
In Filter Websites by category: You choose the categories website as Block, Warn or Allow.
In Web Exceptions:
Allow domains: websites you always allow employees to access.
Blocked domains: websites you always block employees to access.
After the configuration is complete, click Save.
Step 2: Assign policy
At the iOS Mobile Threat Policy you just created, click the blue arrow and select Assgin to apply the policy to the employee.
Click on the employee’s device you want to apply the policy (Ex: iPhone). You can also click Select device group to apply the policy to multiple iOS mobile devices of employees in the group. Click Finish.
Step 3: Install Sophos Intercept X for Mobile
After applying the policy to the employee’s device. On the employee’s phone device, go to App Store and install Sophos Intercept X for Mobile.
Click Accept and Continue, allow the installation Sophos Intercept X for Mobile.
To check the web filtering policy applied to the device, on mobile, go to Network Security > Web Filtering.
The Allow, Blocked domains and Filter Categorized website configurations are all synced to the device.