Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions How to block malicious IP or IPs on Sophos firewall

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 7 replies
Subscribers 39 subscribers
Views 6441 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block malicious IP or IPs on Sophos firewall

Damian Kowalik 10 months ago

How to block malicious IP or IPs on Sophos firewall ?

This thread was automatically locked due to age.

Top Replies

Vivek Jagad 10 months ago in reply to Damian Kowalik +1 verified

Create a black hole rule to drop packets from unwanted sources from the internet. Create a country-based firewall rule ....similarly you can create IP base too...

Parents

0 Vivek Jagad 10 months ago

Hello Damian Kowalik ,

Thank you for reaching out to the community, You can create a Firewall Rule -- make sure it's higher up in the list of rules so it overrides -- that catches traffic from the WAN zone and the IP address of that host and drops the traffic.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Damian Kowalik 10 months ago in reply to Vivek Jagad

Thank you Vivek.

Is there a KB for above ? With all the steps ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 10 months ago in reply to Damian Kowalik

May we know the current model and firmware ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Damian Kowalik 10 months ago in reply to Vivek Jagad

Yes sir.

Model - XGS2100

Firmware - SFOS 19.0.3 MR-3-Build517
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad 10 months ago in reply to Damian Kowalik

Create a black hole rule to drop packets from unwanted sources from the internet.
Create a country-based firewall rule....similarly you can create IP base too...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Damian Kowalik 10 months ago in reply to Vivek Jagad

Thank you.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Damian Kowalik 10 months ago in reply to Vivek Jagad

Thank you.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Vivek Jagad 10 months ago in reply to Damian Kowalik

You're welcome Damian Kowalik

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel