Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • sophos xg log viewer not working

    Hello, Since installing the latest version of SFOS Firmware 19.0.0 GA-Build317, I found that reports they are no longer functional since 2022-07-29 13:12:22 , how I should do to solve this problem , this is the first time I have encountered this kind…
  • XGS 126 report disk full

    Hello! I have a Sophos XGS 126 firewall, and the report disk fills up every week. I got emails that the " Reports disk Usage reached 90% exceeding the higher watermark of 90%" and I need to flush the reports disk to work. I disabled the log in all firewall…
  • SFOS 19.0.0 GA-Build317 : Log Viewer behavior

    hello I have server with SFOS v19, I am confused about log viewer. I think that it always show only logs in 10 minutes window. I tried to change time filter (all records ,last 4 hours, 60 minutes, etc.) but it doesn't work . I can only view firewall…
  • XG -Report partition full

    Hello, I just migrated a customer from UTM to XG (18.5 since 19 is not recommended by the support) and the default 80GB report partition of the VM is filling very quickly, in about 20-25 days. Logrotate is not well implemented and the firewall got…
  • Logviewer sometimes no origin/destination-port

    Good day, at the moment we have a lot of shity traffic going on , mostly from Russia and its lovely friends . Right now I ´ ve seen that there are p ackages without origin-port and destination-p orts in the Log Viewer . Whys that ? Never had this…
  • Log and Drop (IPv6) firewall rule "Allowing" and "Denying"... huh?

    I have a firewall rule (rule 20) which is a "log and drop" rule at the bottom of the IPv6 rules. But I'm seeing something very weird: some of the time it says "Denied" and some of the time it says "Allowed". There are no exceptions in the rule. Not only…
  • Garner Service Dead - XG V19.0 GA

    Hi all, I am running the latest version of Sophos XG (19.0) in a HyperV VM. All has been well since installation some time ago, but suddenly I am having issues with the Garner service, and the XG is reporting Service LoggingDaemon stopped. No config changes…
  • XGFW All Reports are empty.

    My SG330 (SFOS 19.0.0 GA-Build317) has been running for a long time and was recently upgraded to V19. I don't read reports very often, but today I found all the reports were empty. No matter how long you choose . Where might I look to troubleshoot this…
  • Looking at awarrenhttp_access.log for FQDNs

    I have an XG125w (SFOS 18.5.2 MR-2-Build380). A while back, I had a website that needed a web exception for SSL/TLS decryption and scan. The domain needed did not appear in the SSL/TLS log viewer. I opened a ticket with support and they gave me some…
  • Sophox XG reports filtering by outgoing Port (interface)

    Hello, I have two ISP router, ISP1 router connected to port 2 and ISP2 router connected to port3. So i want to filter reports by outgoing port (interface), but the report page gives me only the option to filter by rules, source zone or destination…
  • Log Viewer not Updating

    Hello, I am running XG FW firmware version 19.0.0. Log Viewer is no longer showing current entries for all categories. The last entry logged was on 1/26/22. I've checked log settings and disk space and everything looks correct. I also have…
  • Source Countries are not reported, displaying "Reserved" only

    Hi. I'm using the most recent version of Sophos XG Firewall in a virtual Proxmox environment. I'm using it as my internet gateway / router. Therefore I have NAT enabled using the default firewall rule with a linked SNAT rule (MASQ). I enabled DPI…
  • How to see IP address based usage report in XG firewall

    Hello Guys, We are using Sophos XG-220 firewall since long. We have a Active-Passive configuration. For Internet usage, we have created multiple VLANs and All VLANs have multiple users. All users going through captive portal and login it's user name…
  • Help with "Invalid Traffic" in logs

    Hi, We have an XG 135 running SFOS 18.5.3 MR-3-Build408. There are two gateways, a primary and backup. One of our users is encountering an intermittent timeout on a specific website when performing a specific action. I have been checking our firewall…
  • Check logs for outbound SMTP traffic

    Hello, We have an old linux server we use to send emails with. It was set up by an employee who is no longer with the company, and no one has the login. We think we have moved all of our services off this server, so we think it is no longer being used…
  • Sophos XG firewall to elk configuration to dashboards.

    Hi I would like some guidance on how to configure elk to populate dashboards once SophosXG firewall is sending logs to my server and I confirmed this using tcpdump command?
  • disk usage - Sophos XG210

    Olá, Estou recebendo com grande frequência, alertas de utilização de disco ultrapassando os 80% em meu firewall e sempre que ocorre, realizo um purge manual dos logs. Acontece que a utilização do disco, por report está muito elevada, muito acima…
  • firewall logs - dest urls not ip address

    hi all, got an xgs firewall but when i go to "log viewer" from the home page to see live logs, all i can see is "src ip" to "dst ip" is there a way to see the "src ip" to "dst url" if i cant do it via the gui, is there a way to do it via terminal…
  • XG 18.0.6 Logging of NAT Rules and DNS activity

    Running XG 18.0.6 on my own hardware. Short version: How do you log activity of: a) DNAT rule which diverts DNS to the Sophos LAN Port b) The DNS service itself I can do some packet capture, but the logging tool seems to ignore a DNAT rule terminating…
  • Admin Logs for XG330

    Hello everyone. I have a question about the Admin Logs for XG330. Our Admin Logs in the GUI shows only the logs of the current day. I need to check yesterday's log, but it won't appear. First question: is this normal? I don't check this log frequently…
  • Can't find firewall logs in AllXGLogs CLI dump

    I've done a CLI dump of all the logs but I can't find anything that logs firewall rule hits (like the firewall section of the GUI logs). What am I missing?!
  • Reports not showing up

    Hi, We have 2 virtual Sophos Firewall in active-passive cluster up and running. When installing, I deployed OVF and before turning on VM and first boot configuration ( I mean creating report and config and signature partition ), I resized VM secondary…
  • Anti Spam logs?

    I am trying to find any log information as a result of "The Sophos Anti Spam Engine has blocked this Email because the sender IP Address is blacklisted" pop-over message that I see in the GUI when I hover over a REJECTED status in the mail logs. I tried…
  • Data transfer report inaccuracy

    Hi, I cannot retrieve accurate reports from on-box reporting. Data transfer report for specific user shows that user downloaded more than 9 GB today but application report shows 1.8 GB usage and web report shows 4 MB. I've checked all other reports…
  • View logs in Central Firewall Reporting

    Hello. Sophos Firewall 18.5.1. I recently changed every log type to log to "Central Reporting". The entire "Local reporting" column is empty. Before doing this I used to be able to go to the Sophos Firewall and click Log Viewer at the top right and…