Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • MTA RBL syntax

    XG310 (SFOS 19.0.1 MR-1-Build365) All documentation examples for MTA RBL show usage with hostname only. Is it allowed to add information on the types of answers to consider? Background: spamhaus.org has blocklists in 127.0.0.0/24, but returns error…
  • MTA is rejecting all incoming mails due to blacklisting from spamhaus.org

    Since yesterday, all incoming external mails are rejected due to "RBL listing". However like outbound.protection.outlook.com they are not on any RBL if I check. This happens on both independent XG 19.0.1 I am using (Home Edition) Could the reason…
  • Remove internal IP and hostname from mail server

    Hi, is it possible to hide the internal IP and hostname from the mail header which the XG appends on outgoing mails? I removed already the routing informations from our exchange with the following command: Get-SendConnector "Connector Name" | Remove…
  • AntiSpam Service died-v19

    Hi After Upgrade Sophos SW-19MR-1, the AntiSpam Service died and I Can't Start Service. ApplianceCertificate was also regenerated, but it didn't work. Please, guide me Tanks
  • SASI Engine- NC-93678

    Hello, When will this bug be fixed? Impossible to update before. My users would be penalized too much 2.13.0.0
  • XG doesn't add DKIM signatures to outbound e-mail

    Hi there. I'm running Sophos XG 19.01 using it in MTA mode for e-mail. I am attempting to enable DKIM signatures on outbound e-mail without much luck. I've followed the details in the documentation ( https://docs.sophos.com/nsg/sophos-firewall/19.0/Help…
  • Apple Mail and issues with ActiveSync - NC-62805

    Hi, We are having som issues with sending mails from Apple devices using Apple mail - it seems to be related to NC-62805 https://community.sophos.com/sophos-xg-firewall/f/discussions/127826/sophos-xg-18-0-3-active-sync-email-problem https://community…
  • Outgoing Interface

    Hello, I am James from Chicago and I run a how-to base tech site ; I am facing some problems sending and receiving emails to the internet; an XG requires a smart host upstream. My issue is that the XG already sends outgoing emails on the appropriate…
  • Host based Relay still gets Greylisted

    Hello, we got a Sophos XG in MTA Mode Firmware Version: SFOS 18.5.2 MR-2 Now i got the following Szenario. We set up Exchange Hybrid. we got Centralized Mailflow from Cloud through our on Prem Exchange. I added all EOP Servers to Host based…
  • Too many inbound emails blocked by RBL check

    Hello Community, in the meantime, we are receiving more and more complaints from our customers that too many emails are no longer arriving. I have noticed that many previously problem-free and unblocked emails are blocked by RBLs. After I removed the…
  • Preview of quarantined emails in User Portal no longer possible

    Hello Community, a customer of ours told me that the preview of emails which are in quarantine is no longer possible in the User Portal. There is only Delete and Release (and now also Release and Report as false positives). Has this feature been removed…
  • SMTP Relay settings in XG115?

    An XG115 and XG135 are both running SFOS 19.0. On XG135 I click Email/Relay Settings to set up SMTP Relay for specific devices. On XG115, the Relay Settings menu command is not offered. If I click in the Search box and type Relay Settings, it offers…
  • Sophos XG Email protection URI blocklist?

    XG310 (SFOS 18.5.3 MR-3-Build408) incl. Email protection license I am wondering if the Email protection includes URI blocklist detection? Example: a phishing mail last week contained the URI https://storageapi.fleek.co/4524b2f2-4642-4a38-9b65-c5445b0b3d26…
  • Mail from Sophos XG MTA to mailserver over IPsec tunnel

    Dear community, we receive mails by a XG230 MTA and want them to be send to an exchange server over an IPsec tunnel Site A: Sophos XG230 IP: 10.99.0.0/24 MTA receives the mails from outside, the mails are in the mail spool of the XG230 Site B: IP…
  • Sophos XGS Email protection missing bulk

    Hi all, In Sophos Central, there is an option to block bulk email, but there seems to be none in the email protection in the XGS. So I guess there is no way to block bulk emails if I have just the email protections in the XGS ?
  • XG 18.5.3 MR3 - Limit SMTP submission - 550 Mail Submission Rate is too high

    Hi, i need some help. We send from a internal postfix server about 3000 mails to customers. Some of the mails bounced, because of some limits in XG SMTP Services. I received this errors message in postfix.log 550 Mail Submission Rate is too high…
  • DLP - Rule by word ?

    I need to make a rule only by name, for example, the message contains the word red, and I want to stop the sending, how do I?
  • SFOS 19.0 MR1 new email option

    Hi, in 19.0 MR1 there is a new option "Email - Added an option to report a spam email as a False Positive from the quarantine release screen". Our HR department will receive mails from another company which sends encrypted pdfs - so the MTA can't…
  • Issue with Mail protection and Microsoft exchange self-signed certificate.

    We're using XGS126 (SFOS 19.0.0) with active Mail protection subscription and our mails are hosted on on-premises Exchange server. We had issue, that we got error message because Sophos couldn't verify certificate for our internal mail server and mails…
  • Sophos Smarthost - Outgoing Interface + NAT

    Hello, an XG uses a smarthost in the upstream to send and receive mails towards the internet. My problem is that the XG sends outgoing mails already on the right interface, but here is a transfer network towards the smart host, which is private and…
  • Outgoing (SMTP) Traffic uses undefined WAN Line

    Hi all, I have Sophos XG 18.5.4 with multiple WAN lines (different vendors for failover) and also multiple IP addresses per wan line. Outgoing SMTP traffic needs to fit MX config in internet so I defined SD WAN and NAT rules as described here https…
  • Sophos Email Setting - Mail Spool

    Hello. Need help with Sophos XGS136 Firmware 19, I have enabled email protection and created a on prem mail server, I don't have problem for external domain to reach the mail server. It would be able to received mails. My problem is from the on…
  • Disable TLS1_1 in MTA mode

    Hello, I'd like to disable this version of TLS from my MTA configuration, is it possibile? I already enable the flag on "Disable legacy TLS protocols" Thanks in advance for the help. Francesco
  • XG SFOS 19 Mail Relay MTA route to host with different port

    We have an XGS cluster and we want to use the Email protection module in MTA mode. When entering a static route to a mailserver, the emails are normally sent over port 25. When using the Spam protection the normal procedure for blocking non existing…
  • How to configure the quarantine digest for a user which has serveral eMail addresses?

    Hi! On a Sophos XG 115 with v19.0, how can I set the quarantine digest of a user to include other email addresses of the user (not only his main address)? I can't find anything about this in the docs. Is it also possible to send a quarantine digest…