Linkz

Like my Rulz post, I will maintain this for the foreseeable future.  Feel free to PM me or post here with suggestions for additions, corrections, improvements, etc.

Utilities, Etc.

Delete Up2Date Packages to Free-up Space in the root directory
Log names and service locations
MxToolbox Email Blacklist Check
http://centralops.net/co/DomainDossier.aspx
namebench - Open-source DNS Benchmark Utility
Sophos Firewall: How to re-image the appliance
UTM HCL
http://www.tamos.com/products/throughput-test/
Free Essentials License
Ideas

TrustedSource - Check Single URL
Rulz (last updated 2019-04-17) Also see Doug Foster's take on some of this: READ ME FIRST: UTM Architecture
Sophos UTM: How to recover access in the event of password loss
Save a cert chain for WebAdmin/User Portal that has an intermediate cert
http://sophostest.com/
Retirement calendar for Sophos UTM & XG
Reboot Sophos Router
ASG 425 Display with homelicense
*Unofficial* Hardware Compatibility List (HCL)
UTM Support Downloads
version change trick
Douglas Foster’s ideas about working through the The Great Firewall of China

Sandstorm

Sandstorm FAQ

DNS

DNS best practice
Block a TLD
Disable root hints

Network Protection

Packetfilter logfiles on the Sophos UTM
V9 IPS Rules
persistent changes to packetfilter timeouts

Networking

Accessing Internal or DMZ Webserver from Internal Network

QoS

Understanding QOS for SIP VOIP on the Sophos UTM

Web

Auto Configuring Proxy Settings
HTTP Log File
Configuring HTTP/S proxy access with AD SSO  The article is aimed at Standard mode but 98% of it applies to Transparent mode, too.
Sophos UTM: Httpproxy with AD-SSO authentication doesn't work with Internet Explorer and Chrome after upgrading to 9.5
FindProxyForURL - PAC & WPAD Resource
How to change the outgoing interface for Web Filtering
HTTPS Decrypt and Scan FAQ

Email

Basic Exchange setup with SMTP Proxy
Starting to Use Strict RDNS
http://www.cyren.com/ip-reputation-check.html = black.rbl.ctipd.astaro.local
List all domains we've sent email - Whitelist
Block TLD Email Senders

Webserver

Exchange WAF Guide
Publish RDG for Server 2016
Web Application Firewall: Configuration and troubleshooting
Webserver Protection Reverse Authentication

Wireless

Repair AP 55 firmware

Endpoint

How to uninstall Sophos Endpoint Security and Control
Change Endpoint Tamper-Protection Password
How to migrate from UTM Endpoint Protection to Sophos Central Endpoint Protection

VPN

.ovpn ßà .apc Conversions
How to Run Preconnect/Connect/Disconnect OpenVPN Scripts
Auto-Failover IPsec VPN Connections
Sophos UTM multiple S2S IPsec VPN mit Failover – Tutorial (DE)
Hub and Spoke Site-to-Site VPNs
How to allow remote access users to reach another site via a Site-to-Site Tunnel
VPN between same subnets  & More VPN between same subnets
Sophos UTM Site-to-Site VPN Azure
How to connect Shrew Soft VPN client to Sophos IPsec VPN
How to create an X509 key based Site-to-Site VPN
How to Establish Site-to-Site VPN Connection using RSA Keys
IPsec Site-to-Site – Kevin’s Kwik Konfig
How To Establish Site-to-Site VPN Connection using a Preshared Key


Change log: 2019-07-01 Added more new links and sections. 2017-10-09 Added a dozen new links. 2017-04-13 Fixed the links on this post - pasting from Word resulted in everything being garbled.