Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Block sites

    I have 2 offices at different locations at both offices there are sophos. Now i want to block some sites at both offices but it only works on head office. Please help me
  • Apple updates

    Hello, I have some users on my LAN trying to update their MacBooks pro (everyone with the HTTPS decrypt enabled), but they are having troubles. Can someone tell which https decryption exception should I add, so they can update their MacBooks? And…
  • policy override

    I have blocked facebook using web category (social networking). i enable override and created the user and group to override the website....outcome, when i insert the code from my user portal the site is not opening....shows its procesing then blocked…
  • Safe Search Ver - SFOS 18.5.2 MR-2-Build380

    Hi, I just Recently Update my SOPHOS XG 430 Firmware Version From Ver 17.5 to version 18.5.2 MR-2-Build380 and i found that Safe Serch are not Working can one idea About this this is a BUG Note : in Version 17.5 it is Working OK without any Problem…
  • Youtube block for a specific time period

    Hi, I want to enable Youtube for a specific time period and needs to block for rest of the time. I have created a rule with time specific but it doesnt work. Can u help me out on this.
  • Block VPN Exntesion/Add-on On Chrome, Opera browser

    Hi guys, I've Sophos XG Home that block all Entertainment Web Browser. Problem is users use VPN add-on on Browser such as Hoxx VPN, Touch VPN, Ultrasurf,... so user still can access to Entertaintment site like "Youtube.com". I add application rule…
  • Adobe Creative Cloud updates failing with error 113 on XGS 87

    After I migrated from an XG85 to XGS87, I can no longer download Adobe Creative Cloud updates. I get error 113 which is a vague error that indicates the problem is on my end. My XGS87 is set up primarily with the defaults. I'm using XGS87 (SFOS 18.5.2…
  • "Securly" security provided by school conflicting with web proxy.

    I have an interesting problem, which I have solved but don't understand what is going on! I run Sophos XG Home SFOS 18.0.6 MR-6-Build655. My daughter has a laptop from school which runs an azure based cloud office setup, with a firewall/security app called…
  • Office 365 Exceptions

    Currently we have to create exceptions for Office 365 in the web filter by following the guide here: Sophos Firewall: Configure web exceptions for Office 365 It would be nice if the exceptions could auto-update the list of IP's and URLS from http:/…
  • GoogleDuo

    Unable to get Google's Duo chat app to function externally. I have all ports and services open to test it, and while it will connect, there is no audio or video. Ideas?
  • web policy override block page not displaying

    Client requirement: -blocking all unprofitable websites and app -web policy override configuration for specific users eg lectures and administration department Problem: -after blocking the websites requested and tested this page comes up …
  • Dropped due to TLS engine error: FLOW_TIMEOUT[5]

    I appreciate that other people have raised this issue before, but I am having problems with a specific IOT device trying to send a data packet to the cloud. This particular device (which reports the salt quantity in a water softener) causes the following…
  • Webpage HTML Inspection using DPI

    Hello, Is there a way to block a sites having a specific string in the HTML they render in a page when DPI is enabled? I know this is possible already on anything in the Url of a site, but what about the contents of a page? (within the HTML) Thanks…
  • Filtering Games by Rating

    Is there any way to filter games (XBox, PS etc) by their rating with the XG Firewall and the UTM Firewall? I know this can be done done with parental controls on the game consoles but canit be done with the firewall?
  • Scanning Emails - Invalid Certificate

    I am trying to scan inbound emails that are fetched by Thunderbird, the iOS mail client, and the Gmail Android app. Sending and receiving seems to work, however, copying to the sent folder does not, unless I accept invalid certificates under the POP/IMAP…
  • Hide web policy override access code while typing

    Hi, I'm new to XG firewalls, so please bear with me. I have created a user and a web policy override access code as outlined here: https://support.sophos.com/support/s/article/KB-000038467?language=en_US This is working as expected, but when typing…
  • Allow Internet through MAC , Use Sophos as Proxy

    Hi, Community, one of the problems we are facing is to allow the internet based on MAC address to both the VLAN Users if this is not possible due to the involvement of the router then is it possible to create a rule on FW to use it as a proxy. My network…
  • Upstream proxy

    I am currently migrating a customer from utm to xg. He is using an upstream proxy for any some corp websites, the others are going directly on Internet. All the clients are using the utm as a explicit proxy at this time. As there is a default…
  • apple.com URL Filtering Exception

    We have a URL Filtering Exception for all apple.com traffic. See below. ^([A-Za-z0-9.-]*\.)?apple\.com\.?/ Is it possible to craft/recreate the above to apply the exception to all apple.com traffic except music.apple.com ? Therefore blocking music…
  • Changing web filtering solution

    Hi there, we are a school that currently has a Sophos XG that is doing our web filtering. We now want to change to Smoothwall for the filtering and would like some advice please. Currently, the setup is: LAN > XG > Router > WWW With the Smoothwall…
  • HTTPS Decrypt and Scan Encountering Warning Pages

    Hey Sophos, We've recently been testing Packet Inspection / HTTPS Decryption and was mostly a success, but some sites were presenting the below, even when we had the appliance cert installed. Can someone shed some light as to what was causing this…
  • Omitting an exception for a specific group

    Hello, Once that a policy checks exception has been created, can I ignore this same exception for a specific group by a firewall rule (it can be by a IP Range, IP list, networks, Host Group, by selecting an entire in interface... it doesnt 'matter)…
  • Content filter battle against images containing text

    Hey folks, So I don't think there is an answer for this yet unless there is some funky AI based technology that might be in the endpoint soon. A school came to me saying there were inappropriate images being displayed. Turns out there wasn't at all…
  • how to export a list of default categories that can be blocked by Sophos?

    Hello there, Can we export a list of default categories that can be blocked by Sophos? If we can save this as pdf or word file , it would be good Thank you.
  • Web Filter - Block clients by user-agent

    Hello, I am looking for a way to regulate internet traffic based on user agents. Unfortunately I don't have control over the devices in our network, so I would like to restrict access to the internet based on the operating system. I read in another…