there are four columns in the Allow/Block page [Action, Address/domain/ip address, Created on and Sender authentication ]. It would be useful to know if an allowed address fails the sender authentication check. When a client asks us to allow an address we do not have time to test to see if the address the client requested us to allow passes the sender authentication check before adding to the allow list. If you could add column or two to the screen. Number of messages that failed sender authentication in the last 30 days. Number of messages that passed sender authentication in the last 30 days. The idea is if there are messages failing we can contact the sender t oget them to increase their security and once they are passing the authentication check we can enable it.
Hi Dan Marko,
Thank you for posting into the Community. This would count as a feature request.
I would recommend going to the link below:
community.sophos.com/.../sophos-ideas-portal-retirement
Members of the Product Management frequent here as well but the official process would be discussed in the link I have just given you. Thanks!
Regards,
Jose Palad
SOPHOS says on that website
We will be retiring the legacy Sophos Ideas portal (https://ideas.sophos.com) on 26 July 2022.
It also says
Customers can continue to discuss and comment on ideas in the different product communities
here at https://community.sophos.com. Our product teams are monitoring requests and suggestions
and your comments will not go unheard.
Which might or might not be true. Thanks again for your response.
We do provide a report for Message Authentication failures. Up to 365 day view of this can be filtered and on the main dashboard as well. See last screen shot for the column for Auth failure with hyperlink that takes you to the Message History for each of the messages. Note it is also export enabled. I applaud your effort to contact senders to fix their message authentication and hope you have lots of success getting that done. Many people simply don't understand DMARC, SPF, DKIM.
The report you suggested lacks enough detail to action on. If I know which items failed sender authentication then I can action them. If a allow list entry with sender authentication enabled fails the email is not delivered. I can then ask the recipient if it was an important email and either remove sender authentication or ask the sender to improve their environment. If an allow list entry where sender authentication is disabled fails sender authentication then I can ask the sender to improve their environment. If an allow list entry where sender authentication is disabled has not fails sender authentication for a few months. I would be able to ask the recipient if we can enable sender authentication.
Email Gateway - Inbound Allow/Block --- sender authentication
The report is clickable and takes you to message history which provides all the detailed information you would need to discover sender/receiver which is all that is required to add to an allow/block list. We even give you the option from the message details window to add the user or domain to a blocklist by clicking a button. In addition there is a category filter in Message History search that will show you which messages failed authentication.
In regards to printing end user allowlist/blocklist that is a feature that is coming in late June of 2023. Admins will have access to edit individual user allowlist and blocklists as well as export/import.
Good Morning Shoaib
You are replying t oa previous thread and very few members will see your request. You should start a new thread instead.
But you can type an IP address in the allow /block page in the menu. Just type the IP address instead of the email address or domain name.
Hello shoaib masood ,
You may refer to this doc guide on how to allow/whitelist the said IP address: https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/EmailAllowBlock/index.html
Cheers,
Raphael Alganes
Global Community Engineer, Support & Services
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.
The award-winning home for Sophos Support videos! - Visit Sophos Techvids