Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • BLOCK TELEGRAM

    dear all, can someone help to block both telegram App and website on my sophos firewall
  • REMOTE ACCESS DENIED

    Hi, I am new to Sophos products I newly get into it and the BASIC installation has been done. I discovered the Sage300 application that our staff working remotely using a public IP to connect to the onpremises server is not working after installation…
  • Firewall Rule block internet access when placed on top (Sophos XG330 (SFOS 20.0.0 GA-Build222))

    Hello Community, I am facing a challenge in getting a rule to block social media and video hosting to work. I created an application filter and web policy to block all social media and video hosting. Created the rule and placed it at the top. It blocked…
  • RustDesk blocked by XGS

    Hi. RusDesk remote control app, suddenly can no longer connect to the network. I did some tests and I realized that if I bypass the Firewall (XGS 136 sfos 20), Rustdesk works perfectly. I have not implemented any rules to block it, so I suppose Sophos…
  • Cannot send Viber attachment on desktop version but successful on mobile version

    Cannot send Viber attachment on desktop version but successful on mobile version. Just migrated from XG210 to XGS2100 with latest firmware SFOS 20.0.1 MR-1 Build 342. No problem in fresh setup on XGS2100 both desktop and mobile version on Viber. Thank…
  • How to exclude tightvnc from Risk or High Risk application list

    Hello All, I have added the "Block high risk (Risk level 4 and 5) apps" to the " Identify and control applications (App control)" part of Lan-To-Wan Firewall rule. With this in the La-To-Wan firewall rule, I can not connect to a remote computer, using…
  • Preventing Users from using any desk or Team viewer

    What is the best way to block users from using any version of Team viewer and Any desk and what ports have you used if we need to block ports? How to do that on Sophos?
  • classify banking/financial services in the Application Object

    Hello, Do you have any recommendations for classifying financial services/banks and bank websites in the Application object? I need to use SDWAN for this type of service, but generally access to these sites are classified as "Secure Socket Layer…
  • Allow Firewall for Copilot

    Hello team, We would like to know which Category unblocks the Buil-in copilot that is coming with Microsoft Edge. Is there an exception be made specific to co-pilot alone?
  • STUN question about

    I noticed in The Logs from our Router that there is 1.25GB Upload on STUN and about 850MB Download STUN. Could someone please tell me what that could, I say could be ? Could it be video chatting over WhatsAPP OR FACETIME ?.
  • Application Filter Categorisation Challenge

    Hi Sophos, A user at our org was sent a link to access a document online. This document was hosted by autoexel[.]info which doesn't flag up as malicious using any of the tools available to us, but the Sophos Firewall determines is a TOR Proxy, and…
  • Application Filter - blocking policy questions

    Ok unless I am missing something, you: Create an Application Filter, set it to Block. But in the GUI overview it shows default action is Allow. You have to edit the policy to see it's set to block. Poor design and visually confusing. Create a Firewall…
  • Application Filter false positive - IP whitelist

    Hello, I found a false positive in Application Filter. Eset connections are seen as Freegate Proxy connections. I need to add an exception for some IP addresses / FQDNs. It seems that a specific area for this purpose is not implemented in SFOS. So…
  • Firewall XGS 116 Enable to configure some rules

    Good morning, I have a problem regarding the configuration of certain rules at the Sophos Firewall level. It is impossible for the local partner to filter me on all smartphones connected to the network, a ban on all applications except Microsoft applications…
  • Can we block chrome or any browser vpn extensions

    want to block browser based extension vpn
  • Allow FB Two-Factor Authentication Only

    Our company allowed Facebook Messeger as messaging app but we are having hard time to allow page of Facebook two-factor authentication page without allowing the whole Facebook website.
  • PSIPHON - how to block the application version?

    Hi folks, I have been working on another thread where a user has not ben able to block PSIphon. I have been able to block PSIPHON on all web access from ipads, iPhones and MBP. The issue is how to block the PSIPHON application theat you download…
  • Branch site not connecting to share point and one drive

    Good day I have a Sophos firewall XG 310 V 19.01, The firewall is at the HQ, and there are MPLS sites connecting to the head office. we are using Microsoft 365 The problem is, we are failing to open Sharepoint and Onedrive from the MPLS sites. But…
  • office 2013 recovery blocked

    We have a problem with the online recover of 2013. I tracked the problem down to the Application filter . We have an application filter applied to the firewall rule that allows several type of applications, including microsoft office and click2run…
  • Sophos Firewall blocking root DNS servers as Psiphon Proxy when using Unbound w/ AdGuard Home DNS

    When my at-home DNS server which is running running Unbound with Adguard Home DNS contacts the root DNS servers, the root servers are detected as psiphon proxy by the firewall. I do not have any Psiphon proxy app on any of my devices. Is this a false…
  • Apllication Filter stuck on loading Sophos xg 19

    whenever i open a rule the application filter stuck on loading i restarted it but se ems weired to me.. any fix?\
  • Application filter keeps getting overwritten

    Hello. After importing some firewall rules from another XGS3300 running 19.5.0 over the weekend, each morning I'm coming in to find that we can't access the internet. When I check the application filter for "Block high risk (Risk Level 4 and 5) apps"…
  • Block XVPN servers

    Good morning We have an end customer (a school) where students use iPads. It turns out that there are several students who have caught the bad habit of getting IPs from proxy servers thanks to the XVPN application. They do not use it on the iPads, but…
  • False Positives

    Hello, we are having some trouble with Zoom meetings where the sound is briefly dropping at times. Sometimes we get the network quality message. I may have traced the problem to some of the meeting traffic getting flagged as Proxy and Tunnel (x-vpn…
  • Denied OpenVPN connection still transferring data

    I have a strange issue today. I have a firewall rule to block OpenVPN connections in place and it seems to work. However, today I discovered data is still being transferred even the connection is denied. I can see from the firewall log the connection…