https://community.sophos.com/sophos-xg-firewall/f/discussions/108259/utf8-filename-transfer-attempt---what-does-it-meanFirewall blocked an email. I do not understand why . Log: 2018-10-20 14:30:19IPSmessageid=&quot;07002&quot; log_type=&quot;IDP&quot; log_component=&quot;Signatures&quot; log_subtype=&quot;Drop&quot; ips_policy=&quot;&quot; ips_policy_id=&quot;7&quot; fw_rule_id=&quot;71&quot; user=&quot;&quot; sig_id=&quot;12597&quot; message=&quot;SERVER-OTHERen-USTelligent Community 12https://community.sophos.com/thread/387091?ContentTypeID=1Sun, 21 Oct 2018 16:25:25 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:c7e6b250-f9f4-41cf-a8ef-6af1e554d120rfcat_vk<p>Hi MBP,</p> <p>I wasn&#39;y sure about the mail service version in the current XG.</p> <p>Thank you for the update.</p> <p>ian</p><div style="clear:both;"></div>https://community.sophos.com/thread/387081?ContentTypeID=1Sun, 21 Oct 2018 03:56:20 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:aeae62f7-8c4b-448b-92e8-a843408d1041LuCar Toni<p>Hi Ian,</p> <p>most likely this is not caused by the XG MTA. Instead some kind of service in the network causes those IPS alerts.&nbsp;</p><div style="clear:both;"></div>https://community.sophos.com/thread/387068?ContentTypeID=1Sat, 20 Oct 2018 17:05:36 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:8f246b5f-454e-415c-a331-d3c350f81ccarfcat_vk<p>Hi,</p> <p>here is the link to snort, provides details.</p> <p><a href="https://www.snort.org/rule-docs/1-12597">https://www.snort.org/rule-docs/1-12597</a></p> <p>Wouldn&#39;t say it is the clearest explanation I have seen. I believe the mail service in XG will be replaced n V17.5</p> <p>Ian</p><div style="clear:both;"></div>