Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Does Email Callout Cache Results?

    I was having an issue getting an email to an address and discovered the address (which is actually an alias for another account) was failing on the Callout. I found that the alias had been deleted so I remade it. I'm still getting a failure on the…
  • Web Proxy Policy

    Hi, I'm using Sophos XG virtual appliance and trying to add users as exclusions for the Web Proxy - Transparent mode (Direct Mode off). If Anybody is used, policy is doing the job and blocking .exe files (as example). But i need that some users to be…
  • BLOCK ALL WEB

    Hello I need help, I can't get it. I want to block the entire internet, except the Google Map page, to a single user. I enabled STAS but I couldn't assign a rule to the user. Thank you.
  • Sophos Email Protection - Exception list unsorted sender addresses

    Why is this list unsorted? I suggest an alphabetical order. A list field implies being sorted in a way that you can easily find entries in that list or add missing ones.
  • Syncing Endpoint Web Filtering to Firewall Policies

    Hi All, With both the Firewalls and Endpoints in our organisation being managed in Sophos Central, is it possible to sync the endpoint web filtering to the configuration of the XG, i.e. block lists, allow lists, etc.? This way we're not having to…
  • Create New policy for windows and antivirus updates

    Hi, We just want to create a policy in sophos firewall to allow updates for windows and Anti virus Please Ellaborate your Response
  • Quote how blocking works

    Hey guys. Thanks in advance for your time. I would like to know how the navigation quota works. Is the limit applied globally to the user of the group regardless of the firewall rule or does it only apply to the firewall rule that the group is applied…
  • Sophos Firewall Compliance with UK Government's Keeping Children Safe In Education

    Hi Sophos / Community, Please can someone confirm that Sophos Firewall Web Fitlering is compliant with the UK Government's Keeping Children Safe In Education standards? I'm unable to provide a direct link to the UK GOV website where this inforamtion…
  • WAF and RDG 2019

    Hi all, SFOS 19.5 Just got a problem with WAF and RDG 2019, i can't log to my server and i have this error: /rpc/rpcproxy.dll WAF Anomaly Inbound Anomaly Score Exceeded (Total Score: 13) Hope i will find…
  • Youtube allow for 2 hrs

    YouTube is currently restricted by the policy, but we require access to be granted for a 2-hour duration during the lunch break using the Sophos XG330 firewall.Please help to resolve this problem
  • WAF Authentication Forms shows 404 after upgrade to SFOS 19.5.3 MR-3-Build652

    After upgrade - all WAF with authentication form with template shows 404. Opening and saving Protection Policy - does not solve the issue. Recreation of Authentication Policy - does not solve the issue. Reimporting form template - does not solve…
  • XG classification process is broken.

    I am trying to download a manual from a website and it is classified as 'manual proxy surfing' where as the other pages on the website work correctly. I often see 'manual proxy surfing' blocks in my daily reports and not sure which site i f any is causing…
  • HTTPS Decryption Stopped Working - 19.5.2

    Hi Sophos Community, We've had it reported to us by those that use the monitoring software that https decryption has stopped working. We aren't exactly sure when it stopped working, but it appeared to have done some time after moving to 19.5. Though…
  • Improvement: Add Message-ID header to mail send from SFOS

    Hi, just found out, that mails sent from SFOS 19.5.2 MR-2-Build624 are missing the Message-ID header, required by RFC. Not a critical issue, but our mail archive softwares complaines each time, a mail from our XGS should be archived.
  • Blocking Tiktok via Firewall Application Control and Endpoint Application and Web policies

    Defense contractors and others with government contracts are now required to block access to TikTok. We have a number of customers that fit into this category. Sophos has long had Musical.ly as an available application to block in SF, even in the last…
  • Web Filtering "Allow All" versus "None"

    We're using a particular messaging app that works if the applicable firewall rule has Web Filtering "None", but not if the firewall rule is "Allow All" (or equivalently a Policy that only has the default Allow and everything else turned off). What's the…
  • smtp quarantine items cannot be deleted from web console

    Hi, and thanks in advance for any help. we have some items in the smtp quarantine that cannot be deleted from the console. Can we ssh into the firewall and delete form the file level? I have found a directory /var/quarantine but not not sure if I…
  • Block Nudity Images in searching.

    Hello Good Day, Im using Sophos XG 135 and web policy roles are working well but after a while when I search for sex images they appear but do not open the website. So please how to not appear in searching engine. I tried the article that closes…
  • SSL Inspection - Websites showing up as Insecure despite having added Appliance Root CA

    Hello, I am setting up a new firewall, and feel like I am missing something. The default settings are currently applied for SSL Inspection. I have downloaded the Appliance Root CA from the Web > General Settings, as well as the resigning certificate…
  • Can't get ESO updater to work as exception, any ideas?

    I play a game called elder scrolls online. Everything works other than the updater will fail to update with error code 102. This usually is a server side error however I know it's my XG becasue I can use a different router (Netgear) and it will work.…
  • EMAIL scanning - IMAPS marks messages as possible spam

    Hi folks, I am trying to understand why my XG115W tags my daily reports from the XG as being possible spam? Below is the mail scanning rule that causes there issue. The mail rule is a XG default rule and has recently started the action.
  • Web Filter Leak websites and block undesired sites

    Hi I have a SFVUNL (SFOS 19.5.2 MR-2-Build624 i made a web filter with application filter for social media.. after than i found facebook not- block twitter some times blocked some times works Yahoo blocked msn blocked in general i found…
  • Scan inncoming POP emails

    Is it possible to set up the XGS126 to scan incomming pop mail attachments on mailware?
  • How to config waf without domain

    I want to set up a WAF on the firewall, but a domain needs to be set in the WAF rules. My server does not have a corresponding domain, how should I set it? I checked the official website manual, but I don't quite understand the statement in the manual…
  • Url filtering in guest wifi

    Good morning, i installed sophos firewall to use it as wifi guest access, through the hotspot feature. I also bought the standard subscription, so with web Protection the possibility of doing url filtering. I then loaded the CA of my public domain, to…