Hi, i read a lot of posts about this Problem, but cant get it running. Made the WAF settings strictly by Sophos KB article, owa, outlook anywhere etc are running properly, but active sync isnt working. Log saus WAF Anomaly Inbound…

Hello All, We have a situation where we have switched firewalls for incoming & outgoing mail from UTM to Sophos Firewall. We are using Exclaimer Signature Manager Exchange edition & are currently still in a Hybrid setup. For some reason, some outbound…

Hi all, we have changed for all our AD users the primary email address from <surename<@<domain>.de to <forename>.<surename>@<domain>.de No we have a big problem, that nearly no digest is send to the users. And if you take a look in the user portal…

Hello, on my old UTM i got an exception which gave web access to unauthenticated users to several domains like microsoft.com or windowsupdate.com. How is that possible on xgs? The Webfilter does not contain an exception for authentication.

I've been reading some discussions about WAF support for HTTP/2 before. Is it available in the new SFOS v20? Or is it planned for some next MR?

SFOS 19.5MR3 I'm getting multiple WAF-Logentrys with exact same URL (upper-/lowercase) - one request passes correctly the other one fails due to "Static URL Hardening - No Signature found". As it's same exact same URL it's probably not a configuration…

Using TLS decryption and vendor Docusign suddenly causes issues with our XG firewall on 19.5.3. Happens also on other browsers and OS. Here Safari in MacOS. it works using classic proxy as described here: https://support.sophos.com/support…

Hello everyone, we have been having problems with video conferencing via browser for some time now. We are using a XG 230 in webproxy mode with HTTPS decryption, IPS and ATP activated. The clients are configured with a standard / manual proxy. Everything…

Hello everyone, Since v20 I need to disable / enable a SSL/TLS Decryption rule nearly every to every 2 days. It stops processing traffic and on a client device it "feels" like the internet is down. This instantly recovery after disabling / enabling…

We have updated our XGS3300 to SFOS 20.0 a few days ago. Since then our WAF ist not working. AH00526: Syntax error on line 106 of /cfs/waf/reverseproxy.conf: Invalid encrypted key AH00112: Warning: DocumentRoot [/sdisk/waffiles/1cf6480d9dcdd33a4319301e0d8ef22b…

Hi folks, a question about decrypt and scan that has me puzzled for sometime. The users have the XG certificate installed and functioning correctly except for Apple sites. I have web policies blocking advertisements and use the XG proxy, this functions…

Have already been referred here: https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/GeneralSettings/index.html#smtp-settings I wonder if any of you guys can share with me what and why your settings…

Hello, We use the Web Server Protection of Sophos XG Firewall and have now reached almost 60 WAF rules. This is also the maximum number of WAF rules. Is it possible to combine several URLs in one WAF rule and route them to different servers? WAF rule…

Hi folks, I am trying to identify which web policy is identified on the logviewer reports causing traffic to be blocked. So far the reports have shown policies numbered 1, 2 and 13. The issue being I don't have 13 web policies and policies 1 and 2…

Hello everyone, I have the following question. We have a customer with an XGS 3100 with version 19.5.3. The Sophos serves as a mail gateway/relay and is connected to Sandstorm. Now the question was whether Sophos can also check web links within incoming…

Hello, as the shared mailboxes that we use almost exclusively cannot use the mail quarantine, we have not been using mail quarantine since the switch to SFOS. Recently, however, important messages have been ending up in quarantine again due to an allegedly…

I can only see "Reject" events in the GUI when going to Email -> Mail logs. I do not find them anywhere in any of the built-in logs and they are also not sent as audit logs. The other SMTP Anti-spam events "Dropped" and "Delivered" are both logged in…

Hello, We use 2 WAN interfaces but want to route the outgoing SMTP traffic via one interface. What would be the best approach here?

Hi, I am prepairing configuration to use XGS as MTA and I have some questions which I don't find answers to. Current situation: External MX and MAIL-out server are used, Exchange is set up locally. We have /24 public IPs on that site and only…

Good day, our Sophos XG330 acts as an MTA in our network. We have an on-premise Exchange server for whose domain we have created an SMTP policy in the Sophos email settings. This is working very well so far. Now we have to enable our users to integrate…

Is it possible to decrypt HTTPs on the firewall and send plain HTTP to the webserver (without encrypting it again)? Thanks!

Hi all, When AV or other protection features are enabled, we keep running into various problems while uploading large files. Sometimes the disk space (Temp=100%) seems to be the cause, sometimes other internal buffers. We have the requirement to allow…

Hi, Outlook translator feature isn't working; I received this error, as seen in the below photo, and was unable to find out how to allow the traffic for the Outlook translator tool As I add my IP address to any destination + any port. The translation…

Hello everyone, Recently i noticed a bunch of tickets regarding the following. i want to go on facebook, but facebook is blocked. instead of the blocked page i get Error code: SEC_ERROR_UNKNOWN_ISSUER(firefox) or NET::ERR_CERT_AUTHORITY_INVALID…

Hello, I delete the MTA SMTP default rule, cause it seems to do to much. How is this rule used? How do I get it back? MTA Switch to Legacy and back? Config stays at it is? Thanks Sven