Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Port 80 and 443 open from external if using external IP address. Support says it goes to first rule that matches the port and ignores host name???

    We just had a PCI compliance scan and we failed because HTST wasn't enabled. Looking through everything HTST is enabled on all of our Web Server Protection rules including the default one. The PCI scanning company said the server replying is using apache…
  • WAF Rule

    Dear Everyone, I have a problem with WAF Rule , Do WAF Rule working with or without DNAT Rule . and when Disable DNAT Rule the access to published URL is very slowly and the page load incorrect . Can anyone help me ? Thanks in advance
  • Sophos XG Firewall - WAF Rule - Multiple Domains and One Public IP

    Hi Everyone, I'm a little new to Sophos XG Firewalls and really firewalls in general. I always thought it was not possible to host multiple services (e.g. websites) on the same port and public IP address but when I started to play with Sophos XG Home…
  • Time-Based WAF-Rule possible on XG Firewall ?

    Hi Folks ! I have an interesting question due to a request from one of my customers. He asks me, whether there is a possibility to limit Access to Outlook-Anywhere outside of normal Work-Hours. Background of the question is, that the CEO want prevent…
  • Sophos XG Firewall: Proxy protocol support

    Does Sophos XG Firewall have proxy protocol support similar to the option in UTM WAF settings? I saw an option saying Pass Host header when creating a WAF firewall rule. Will un-checking that give me the same functionality as proxy protocol support…