Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • gmail Attachments

    Hello i'm not able to download any gmail attachment and i'm already using allow all in web and application policies it was working till yesterday and now it's not and i didn't make any changes can someone please help me?
  • URL Referrer Blocking

    We want to allow access to YouTube search but lock down certain search terms. The way the YouTube search works is circumventing the URL/Content search so XG is not blocking it. If you then refresh the results page it then blocks it. Anyone know how to…
  • Telegram Messenger Not Connecting When Any Web Policy is Active

    I'm needing to allow Telegram Messenger on the network but it refuses to connect whenever a web filtering policy is applied, even if it's just the default Allow All policy. I don't see anything being blocked in the logs. I have tried switching between…
  • Web User notification customization - cannot change top and footer images

    Good afternon, I have two clusters of XGS 2100 running with the latest firmware ( 19.5.0 GA-Build197 ). As per object, I am not able to change the top and footer images of the Web User notification. I tried both with JPG and JPEG (8-bit), respecting…
  • web filtering with advertisements/pop ups logs

    Hello, Guys, I have the following situation: In the user's web filtering logs, I have several records of accesses to URLs that the user did not actually access. For example, in the logs there is an access by user X to a certain URL, and in fact what…
  • Ad Blocking lists

    Sophos is awesome and amazing and like other people here have requested it would be amazing if we could import adblocking lists like this one. https://github.com/StevenBlack/hosts If you can already achieve this could someone please help me. I found…
  • Sophos Firewall blocking my website which is using cloudflare dns

    Hi there folks, I am a new user to the firewall using it because I have many sites of my own and a lot of important data on my PC so after reading reviews I decided to use the firewall to protect all of it from brute force attacks and viruses but some…
  • How to get SSL certificate working for Web Filter notifications?

    Hello there, I just enabled a web filter policy to block various websites, but I'm having issues with the user notification options. I have installed a valid LetsEncrypt SSL certificate and it's working great for the user portal. However when a webpage…
  • GeForce Now - Not working

    Hi everyone, having some troubles here - running Sophos XG Firewall. Running into a strange issue, GeForce Now is a new cloud based gaming service however, every time I try to access this behind my firewall it seems to have a connection issue. I've…
  • Server did not respond to client hello

    Hello everybody, Even though I apply exclusion settings for some websites, ssl is getting blocked in tls part. I have given all permissions to the relevant website. When I check the policy test section, it shows allow, but I couldn't understand where…
  • No internet access except for Sophos endpoint installer .exe

    Hey, We got our firewall setup as if you don't have sophos endpoint agent installed you don't have internet access. The problem is : you can't install sophos endpoint agent if you don't have sophos endpoint agent installed first because having sophos…
  • Schedules

    I have a rule setup to block certain devices traffic after a certain hour (you know, so kids don't stay up all hours of the night). On the weekend I allow them time until 1:00 AM. In the schedule definition, I can only specify say, 6 AM to 23:59. Then…
  • Sophos XGS2100: massive problems with Web-Traffic

    Dear Sir or Madam, my name is David Lorenz from AAIC Soft Systems GmbH. We have serious web traffic problems with one of our customers with an XGS2100. It's not easy to describe. The customer previously had an SG and did not have these problems. Now to…
  • Guest Network - XG port 8090 (IPS error messages) not accessible

    I have my network segmented and am using web filtering on our GUEST network to ensure that certain content is not accessible to visitors or my kids. I have Captive Portal enabled in Administration on my GUEST network, however; when a someone tries to…
  • Silently drop requests to denied URL categories?

    Hi, Is there is way in XG to silently drop requests to URLs in blocked categories (via the web filter or otherwise), rather than presenting the user the block message? I know I can block in firewall rules based on FQDN, and silently drop, but I would…
  • Sophos XG Website blocked

    Hello People, i have currently a problem with opening two Website. The Website is www.existenzgruender.de with the IP 46.254.122.16 From any other Client, without Firewall, the Website can be opend. We have the same Problem with www.nexxt…
  • Possible to apply "warn" action to an FQDN host group?

    Is it possible in the web filtering to apply a "warn" action with an FQDN host group as the activity? The specific situation I am thinking of is there is a website we want to configure as "warn", but then if the user chooses to proceed, then we need to…
  • Email blocked with web filtering

    We have a Sophos XG 310 , firmware v19.0.1 , The firewall is blocking emails, with web filtering, we have not configured any policy to block emails, Instead we configured a policy to allow outlook.com , office 365. but if we put web filtering on the firewall…
  • Web User Notifications Customization W/ Country Groups

    Hi we have been locking down the outgoing web requests to certain countries via Country groups via some default rules at the top of the chain of LAN-WAN rules . Occasionally we've had a user request for certain urls to be unblocked and use the exclusions…
  • SSL/TLS Inspection Issues

    Hello, i installed yesterday the firmware. After that i was faced with following issue: In SSL Inspection i habve 3 rules in the following order: 1. Exclusions by website 2. a rule with no decryption enabled from LAN with the Range of Smartphones…
  • i need to allow youtube for specific user in web policy we are using ip based policy.so please help me .

    Hi. i need to allow youtube for specific user in web policy we are using ip based policy.so please help me .
  • Google Meet Issues

    Hi All, Spent weeks with "support" to get Google Meet recordings to reliably work but haven't got anywhere, the final straw for me was after nearly 20 hours across multiple phone calls they asked me to reboot the firewall, despite a reboot being carried…
  • TLS packets not being passed on one link

    Hey there, We've got a weird issue with one application failing because it looks like the XG isn't forwarding the TLS packets appropriately on one link. A: XG135 (SFOS 19.0.1 MR-1-Build365) 10.109.10.250 B: XG330 (SFOS 19.0.1 MR-1-Build365…
  • HTTPS decryption exception for dropbox server

    Hello everyone, I´m trying to sync my local files using the dropbox app, but it looks like there´s an url that I have to add into the https decryption exception. Has someone the complet list of the url used by dropbox that doesn´t accept the https decryption…
  • Troubles syncing with the cloud servers

    Hello, I have a MacBook Pro device, and I'm having troubles to sync my local files with cloud servers, like iCloud, dropbox, OneDrive, Goodnotes. I don't know if it's something related to https decryption or something like that. Has someone an idea…