Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Does SSL inspection analyses WebSocket traffic?

    Hello there, I have a customer who may want to buy a Sophos Firewall with the main reason of using it as a Web Proxy Server. Unfortunately I could not find information regarding WebSocket traffic inspection. My guts tell me that the SFOS will inspect…
  • DNS CNAME? Google Safe Search Enforcement

    Forgive me but I forgot if this is even possible with the XG 330. I am trying to enforce Google Safe Search via DNS with Web Proxy Filtering turned OFF because its blocking a Desktop web app's connection and I have no clue how to fix it other than turning…
  • Webfilter Exceptions and Policies

    Hello community, while migrating a Sophos SG to Sophos XGS, I was wondering wheter it is possible to add the defined web exceptions to a web filter policy? So that the exceptions only count for firewall rules with the appropriate web filter policy…
  • Sophos XG with POP3 Scan

    We use a Sophos XGS87 (SFOS 19.5.3 MR-3-Build652) and we want to use POP3 Scanning in legacy mode. In document ( https://doc.sophos.com/nsg/sophos-firewall/18.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailConfigurePOPIMAPScan…
  • URL blocking not working

    Hello, I have been trying to block some websites lately by adding them to a blocked policy, however, this is not working. Even adding the URL to the "blocked URL for default policy" is not working. Not sure where to start with troubleshooting if someone…
  • open access to all users only for a specific site (microsoft.com)

    hello i need to open microsoft website (for office 2021 activation and such) for every user i have i used the web exception to allow them but noticed that if a user is not present in any firewall rule , the exception don't apply is this normal…
  • Block YouTube Shorts and/or Instagram Reels

    Maybe this is a tricky one. I want to block all TikTok like content on my network. Block TikTok is easier because TikTok only offers TikTok like content (short videos algorithm suggested and etc) But YouTube and Instagram it's different. I…
  • Sophos XG Home Edition and Application signature

    Good day, I'm using Sophos XG Home edition on VM (Vmware), with free license, version SFOS 19.5.0 GA-Build197 I see that many Windows application are being blocked by firewall, for example Logitech and Nvidia daemons for updating drivers, but even Games…
  • Web filtering: differences between Web policy of None and Web policy of Allow All

    I see differences in whether web requests work depending on whether a Web policy of None is used or a Web policy of Allow All is used. So there must be extra things that happen when there is a Web policy of Allow All. Can someone help explain what those…
  • Unable to open certain websites

    When i try to open certain websites i get the following errors The same websites if open them from my mobile hotpsot they work.
  • MATCH KNOWN USERS ISSUE WITH PROXY

    Hello, I'm using Sophos XG2300 SFOS 19.0.1 MR-1-Build365 and I would like to ask why do I get blocked when I'm trying to browse the internet with configured proxy, match known users turned on and web filtering set to none. Through testing and searching…
  • Not able to block facebook and other social Networks

    XG125 (SFOS 17.5.12 MR-12) I created URL Group and Included facebook.com It didnt work it is applied with a Policy but the same policy does block other domains on the same list, after that tried with creating a Category same result doesnt block facebook…
  • XG(S) Firewall: default exception rule "Legacy HTTPS Exceptions" is not in regex notation and very insecure.

    On a XG(S) Firewall the default exception rule "Legacy HTTPS Exceptions" is not in regex notation. Example: When you enable this rule, not only dropbox.com is not decrypted, but also for example secure-dropbox.com People with bad ideas can register…
  • XGS116: Website does not load correctly

    Hello We have 2 Sophos XGS 116 and one website is not displayed correctly. The main.css file does not download or can't be encoded. I have created a ticket and already had a troubleshooting session with someone from Sophos. So far, we can't workaround…
  • Buffering of webradio

    Hi, it may seem like an unusual question because other people on the board ask more "how can I block web radio or other audio streams", but we have a department that need to use some radio ressources like radio.de or radiolisten.de. Generally the audiostream…
  • How to set up ad-blocking web policies ?

    Hello everyone, Does anyone here know how to create Web-filtering policies so that the Sophos XG firewall can also act as a replacement for AdGuard Home or PiHole ? Thank you in advance.
  • External URL Database - URL shortener

    Hej, I would like to block all url shorteners. Is there a corresponding option in the XG? I have only found the possibility to maintain a list manually or to include an external URL database. Can anyone support me with this? Thanks! Best Regards…
  • Web filter blocks unblocked category

    Hey there, I have a web filter policy like that: Why there is a web request blocked which is in a category which is not blocked by the web policy? Thanks!
  • Sophos XG 18.5.4 - Web proxy is not blocking some sites

    Hi to all! I´m not finding the answer of this weird behavior. I have to Firewalls set up. SG 330 and XG 330. SG 330 is working like a charm and I have any issue. I´m setting up XG 330 and and working with the Proxy stuff. I set a Rule for Wifi…
  • XGS107w Firewalls blocking ESET Updates and LiveGrid

    Hi, We recently deployed a couple of XGS107w units (SFOS 19.0.0 GA-Build317) and have been unable thus far to configure them to allow client devices to connect to ESET servers for updates and LiveGrid. The only filtering enabled on these routers are…
  • Customizing Block Message for Web

    Hey Guys, I'm trying to customize block message for web and remove Sophos from top and bottom bar. I have uploaded different images with correct format and size but when I apply the setting, I receive following error. Also I've found deniedmessage…
  • Create Exception for Webproxy Authentication

    Hello, I need to create a authentication exception in XG for the webproxy. There is one internet rule, that is applying a webpolicy, this rule requires authentication. Additionally in the webpolices, users are also configured. Webproxy configured within…
  • office 2021 activation blocked

    hello I have an xg210 and im trying to allow the activation of office 2021 i added all the urls in the web exception , and gave allow all to a specific ip to test , still it is not working nothing is shown as blocked in the logs edit : when…
  • Web Filter Youtube Exception

    Hello friends, I have a question i hope that can help me. I have a web filter policy to Video Hosting category. It works fine, but now i want to allow youtube access, i made the exception following this steps: Login to Firewall Web Admin > Click…
  • Adding O365 Web exception via sophos Central

    Is there a way to import the O365 exception file to the firewalls via Sophos Central? The tar file is usually imported from the Import tab in the backup/Firmware section of XG GUI which is not available in the sophos central thanks SC