Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Create a schedule on a policy that allows a specific user to access certain website at a certain time.

    We blocked a website category but want a certain IP to have access to the category at a certain scheduled time. How can I achieve this?
  • Anyone know how to make exceptions for Splashtop?

    Hello, At work I have a situation that Sophos Support has been unable to resolve. We use Addigy as our RMM for Apple devices, to have remote connections it uses Splashtop. We have not able able to add sufficient exceptions or maybe I am doing…
  • Buffering of webradio

    Hi, it may seem like an unusual question because other people on the board ask more "how can I block web radio or other audio streams", but we have a department that need to use some radio ressources like radio.de or radiolisten.de. Generally the audiostream…
  • Sophos XGS V19 Web Certificates and browser warning pages

    Hello, Starting to get a bit frustrated with the Sophos web certificates - think I am going around in circles. I have both the Default Appliance certificate and the Security SSL Certificate installed into the Trusted Certificates store on a Windows…
  • Invalid Traffic for NoSpamProxy/Cyren Antivirus

    Hello, we are using NoSpamProxy to filter spam/malicious emails and this software uses Cryen Antivirus to check the mail content. Every email triggers a webrequest to the Cyren Server ( 84.39.152.31 ) on Port 80 but these request are blocked by the…
  • TCP Retransmission / RST, ACK - some websites not answering

    Hello, I have a strange behaviour with Sophos XG. It is happening now on 2 sites. On one site I Have HA (A/P) XG2300 with v19 MR-1. On second I have HA (A/A) XG2100 with v19. I tried 18.5 MR-3 with the same issues. Most of the traffic seems…
  • Certificate Office365

    I have a problem with Sophos XG and Office365. some computers pop up a warning like the following when opening Ms. Outlook.
  • "Allow All" web filter policy blocks request allowed when there is no web filter policy

    Hi all I am having difficulty troubleshooting a problem with a request from a mobile phone 2-factor authentication app being blocked by our XG firewall (XG125 SFOS 19.0.0 GA-Build317). To test this, I have created a new top-most firewall rule for…
  • DPI / TLS Scanning exception issue with d1. d2 d3.sophosupd.com when installing Intercept-X for Mac

    Hi, today we're facing something new: issues when rolling out the Sophos Endpoint to Mac Books. Windows Endpoints: no problem. They fail to install. Workarounds like https://support.sophos.com/support/s/article/KB-000044045?language=en_US were unsuccessful…
  • How to set up ad-blocking web policies ?

    Hello everyone, Does anyone here know how to create Web-filtering policies so that the Sophos XG firewall can also act as a replacement for AdGuard Home or PiHole ? Thank you in advance.
  • How to block Tiktok App

    Hi I'am unable to block Tiktok application and can't even find it in application control. Please help... Thanks...
  • PDF generate from our web server behind firewall alwasy blocked

    i have server that run code javascript or something that generate pdf file for download or view but alwasy faild or error my server using local addres nat behind the sophos xg. What shoud i have to do to white list this action
  • Internet pages suddenly no longer work 502

    Hello, since today suddenly several internet pages do not work anymore. The browser gives the error message: HTTP ERROR 502 The page is e.g. https://www.ista.com/de/ Firewall is a XG115w (SFOS 19.0.0 GA-Build317 Do you have a solution? Thanks…
  • External URL Database - URL shortener

    Hej, I would like to block all url shorteners. Is there a corresponding option in the XG? I have only found the possibility to maintain a list manually or to include an external URL database. Can anyone support me with this? Thanks! Best Regards…
  • Web filter blocks unblocked category

    Hey there, I have a web filter policy like that: Why there is a web request blocked which is in a category which is not blocked by the web policy? Thanks!
  • SEC_ERROR_EXPIRED_CERTIFICATE for web proxied sites

    Hello, I am a home user of the Sophos XG firewall - SFVH (SFOS 19.0.0 GA-Build317) - and use it to proxy specific sites... one of those things I proxy is google and youtube. Recently, it seems that the certificates that my appliance creates have expired…
  • Sophos XG 18.5.4 - Web proxy is not blocking some sites

    Hi to all! I´m not finding the answer of this weird behavior. I have to Firewalls set up. SG 330 and XG 330. SG 330 is working like a charm and I have any issue. I´m setting up XG 330 and and working with the Proxy stuff. I set a Rule for Wifi…
  • XGS107w Firewalls blocking ESET Updates and LiveGrid

    Hi, We recently deployed a couple of XGS107w units (SFOS 19.0.0 GA-Build317) and have been unable thus far to configure them to allow client devices to connect to ESET servers for updates and LiveGrid. The only filtering enabled on these routers are…
  • XG550 (SFOS 19.0.0 GA-Build317) : problem with Web filter, RDP connection block after upgrade

    Hi, after upgrade from SFOS 18.5.3 MR-3-Build408 to SFOS 19.0.0 GA-Build317, without changes to the policy, we have a problem with connections in vpn ssl, RDP connections (tcp 3389) are blocked. T he logs indicate that RDP connections are blocked by…
  • XG FW - Some users have "Not Secure" notification in browser even though all sites are HTTPS

    XG FW - Some users have "Not Secure" notification even though all sites are HTTPS Users are authenticated and internet is working, however, no matter which site they go to it always says "Not Secure" "This site has a valid certificate, issued by…
  • Customizing Block Message for Web

    Hey Guys, I'm trying to customize block message for web and remove Sophos from top and bottom bar. I have uploaded different images with correct format and size but when I apply the setting, I receive following error. Also I've found deniedmessage…
  • Web Proxy vs DPI

    Hi Everyone, I finally moved our XG over to version 18 yesterday and no hiccups. My question is I am wanting to get SSL/TLS Inspection setup correctly for our environment and I noticed when I toggled of SSL/TLS inspection->ON, it must automatically…
  • Create Exception for Webproxy Authentication

    Hello, I need to create a authentication exception in XG for the webproxy. There is one internet rule, that is applying a webpolicy, this rule requires authentication. Additionally in the webpolices, users are also configured. Webproxy configured within…
  • How often does Sophos check the accuracy of the geoip database?

    DHi folks, I was investigating an unknown country ip address and found that it belongs to cloudflase in the US. Cloudflare being like AWS etc as a large supplier is cloud servers I would think that the geoip database should be easily updated. If the…
  • No Internet Alert on Endpoints after Sophos XG FW install

    Well, I found a couple of articles on here and have one last fix to try but all the articles are really old. Basically we have installed a new XG. All rules are duplicated and working from old FW. Issue is that randomly some users get "No Internet…