Hello All,

I am a newbee to XG, but have been using UTM9 for some years. In UTM9, I could see a number of attacks being dropped every day. After I changed to XG (version SFVH [SFOS 20.0.0 GA-Build222]) I do no longer see any attacks.

I have activated IPS Protection, currently with 1 firewall rule using IPS (The malware backdoor blocking), and both active threath response feeds MDR and X-Ops, active as well. Both with Log and Drop. Still I do not see any entries in the dashboard, logs or any reports.

I created the Malware Backdoor rule, following one of the youtube videos from "Sophos XG Firewall || Complete Tutorial || Hands-on LABS from Noor Nerworks".

I have more or less the same needs as Hau Lin describes in his 6 year old post "I need help with XG Configuration for my home network", but the screenshots JesseB is referring to in his answer, are just small icons, and when i click them, I'm told I do not have permission to view this directory or page.

Now, it might be that my new XG firewall is actually protecting me against network attacks, just by activating IPS, MDR and X-Ops without any further rules than the standard, but in that case i do not see any result of this, and consequently do not feel safe.

I have the same insecure feeling relating to intrusion prevention, of which my old UTM9 stopped guite a few, as none shows up in the logs or reports.

I hope to find out how to setup my XG so my network is as secure as I felt it was with the UTM9, and I have been thinking about putting back in operation my UTM9, just as the second in line from the XG, before my switch and all the computers behind it. At least until I feel certain the new XG is doing just as well.

I know the XG is far more advanced than the UTM9, and I hope to one day get to a point where I can enjoy that, but for the moment I hope some of you experts can help me, by explaining the simple things, or point me to descriptions / videos that is going through the basic setup needs, to have the XG perform the same protection as I felt I had with the UTM9.

And just for the record: It is the free evaluate version, active to 12.31.2999, running on a Lenovo M82, intel i5 with 8gb ram. It is not registered with Sophos Central. I tried to, even got a Sophos central username, but when trying to logon, I realized I need some kind of app on my phone, to allow access and I never found out which it is.

Best regards

Soren