Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • False Positives

    Hello, we are having some trouble with Zoom meetings where the sound is briefly dropping at times. Sometimes we get the network quality message. I may have traced the problem to some of the meeting traffic getting flagged as Proxy and Tunnel (x-vpn…
  • Denied OpenVPN connection still transferring data

    I have a strange issue today. I have a firewall rule to block OpenVPN connections in place and it seems to work. However, today I discovered data is still being transferred even the connection is denied. I can see from the firewall log the connection…
  • Unclassified traffic can it manually adjust?

    Hello, i want to add manual rules to rename "unlassified traffic" to "xy traffic". Based on Port - is it possible?
  • Apple iCloud IMAP blocked as it was Torrent P2P

    Found a conversation here about the same problem 6 month ago, but I can't read a solution. My firewall is reporting a lot of Torrent P2P users in my network and block the application. In the same time users reports that they can't read mail on iPhone…
  • Cannot seem to get Application Filter Firewall rule to work correctly

    So I attempted to get the application control working based on this article: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/120242/sophos-xg-firewall-how-to-create-an-exception-in-application-filter but I could not get this to work…
  • How to block all vpns

    Just found out that the fire vpn chrome extension, just bypassed my expensive firewall. Looking for suggestions?
  • Sophos firewall application classification errors

    Hi folks, sometime in the last 6 weeks I started a thread on classification errors. I have been doing some further investigation and found thane was wrong and needed to be corrected. I have searched all my activities and not been able to find the initial…
  • Apple iCloud IMAP being called Torrent (due to MR1 or maybe pattern update)

    A while after updating to 18.5.0 MR1 this morning, we noticed we're not getting incoming mail from Apple iCloud. I kept assuming it's an issue with TLS or something, but email worked on my iPhone when I turned off WiFi and went with cellular. In the…
  • Portable Download Block

    Hi, In my organization I want to block Portable Apps. But the issue is that I am not sure as to at which time which user will download which Portable App, so using Application Filtering is of no use as per my requirement., because application is not…
  • Application Filter - Source and Destination IP mismatch?

    Hi, I'd think source and destination IP is wrong here. It took me some time to help a user who reported he cannot download a file, we blocked because I could not find his computer with my query for source IP. We block executabled here. …
  • APPLICATION CONTROL POLICY

    Hello Good Day! need some help its kind a weird that i observe on my xg firewall after i updated to latest firmware version.. before the update, all my policy is working find, the web policy and application policy but know is something puzzle on my…
  • Application filter policies re-order

    Hello, I try to create an application filter which blocks some categories with defined exceptions. There is a article how to set this up: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/120242/sophos-xg-firewall-how-to-create…
  • Sophos XG Applications defining pCloud

    Hello, I turned on traffic filtering on our firewall and am trying to identify the traffic that Sophos is Labeling pCloud. There is a pCloud.com Backup and storage When I attempt to login connect to one of the hosts https://52.20.148.96/ it throws a…
  • Application filter is not working

    Dears I have a problem with my XG-Sophos application filter, I created an application control policy to prevent X-VPN, Thunder VPN and VPN Lighter apps , but still those apps allowed, when i check the log viewer i found them allowed
  • Blocking Cloud Drives Except For OneDrive Failed Using Application Filter

    To Whom It May Concern I've been trying to block all cloud storage drives accessed from our corporate network except for OneDrive. I tested the implementation using my personal iCloud account after the implementation on our Sophos XG firewall of the…
  • I can't block Psiphon VPN

    Dear All, I have a problem with Psiphon VPN Application that end users using it in mobile devices bypassing our hotspot Login portal page. Can you please help me to stop that application. Thanks
  • Application Filter logs block but applications are still accessible

    Hello all, I have an ios device connected to my XG Firewall using SSL VPN with OpenVPN the VPN is a full tunnel therefore all traffic are passed through the XG FIrewall I created an application policy to block whatsApp, Facebook and instagram and…
  • how to exempt user in application filter

    Hi, I have XG310 with V18 Mr5, it is integrated with AD, i have created web policy to block social networking category and also created an application filter to block social networking category. I created a firewall rule, check match user and add…
  • Internet Getting Slow When Enable Traffic Shaping

    I have a problem with Sophos XG home firewall, from recently internet connection getting too much slow as a comparison to previous. So I check with it ISP and their side wasn't any problem. (also I bypassed the firewall and connected my laptop directly…
  • XG blocks application without block message, only PR_END_OF_FILE_ERROR or This page can't be displayed

    When a user accesses lastpass.com he only gets a "PR_END_OF_FILE_ERROR" or "This page can't be displayed" in IE shown in browser when browsing through the XG webproxy. It seems it is blocked because Risk Level is High / 4. Why can't XG show the user…
  • ApplicationFilterCategory problem

    Hi, I'm trying to add ApplicationFilterCategory with this request: <Set operation="add"><ApplicationFilterCategory><Name>hi</Name><Description>krjdfghdjfkhgdfjk</Description><QoSPolicy>None</QoSPolicy><BandwidthUsageType>Shared</BandwidthUsageType…
  • Application and Web Filter Email/SNMP Notifications

    Hi Sophos thank you for allowing Email Notifications for IPS , ATP and some extra system notifications in 18. Is there any chance we can get notifications on Application Filter and Web Filter Deny's as well in the future ? I have some sites where those…
  • Application Filter (App Control) vs Web Policy - Order of Precedence

    Hello, I have issues understanding what is an Application Filter for and how to use it. What I understand: - Web Policies: Allow you to block or allow traffic to users (based on categories/file types, etc.). Only one web policy is meant to be used…
  • Nesting of allowed Web Applications possible?

    Hi, is it possible to nest web application rules? Take this little Chart: I would like to allow different applications to different users on the XG Firewall based on their user heartbeat. So the idea is to create several rules for each application…
  • How to Block Microsoft stores and apps to download?

    HI Friends, I wanted to only block Windows 10 Microsoft stores and its new application download through XG. any idea how this is possible?