Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Sophos FW Unable to download ssl vpn configuration after v20 update

    Hello, i have 2 xgs 116 fw. After updating v. 20 i can't donwload vpn configurations from vpn portal. Error " Failed to download the file. If the problem persists, check with IT. " Under Pattern updates page there is no version shows at SSLVPN Clients…
  • SFOS 20, Exchange 2019, WAF Active Sync

    Hi, i read a lot of posts about this Problem, but cant get it running. Made the WAF settings strictly by Sophos KB article, owa, outlook anywhere etc are running properly, but active sync isnt working. Log saus WAF Anomaly Inbound…
  • Sophos Firewall v20 -- DHCP IPv4 Lease Table is empty

    I have Sophos Firewall v20 GA. In Network-->DHCP, the IPv4 lease table is empty, showing no IP leases despite several devices having dynamic IP addresses. BUG: IPv4 IP leases not appearing in the lease table.
  • SSL VPN Client can connect but no traffic is generated to VPN zone

    Hi all, I was able to use SSL VPN properly with Sophos XG v19. Now I've upgraded to v20 and I'm experiencing issue with SSL VPN. To setup the SSL VPN I followed this guide: https://techvids.sophos.com/watch/wtqMJE1La6TkFjAiaT2d3H I draw a network…
  • XGS 3100, High CPU Consuption

    We have a Sophos Firewall, XGS 3100, whose CPU consumption reaches 98% every day, and when it reaches 100%, it stops working. There is no point in opening a ticket with Sophos, at least here in Brazil, as it cannot be resolved. So I came here hoping to…
  • XG Home VM v20 - Snort using all CPU with some random trigger

    I've seen similar topics here, but none seem to quite work. XG Home VM, v20, with a pretty minimal ruleset. I'm really the only person on my home network. At some random times the VM will go to 90-100% CPU usage and stay there. This has happened at 2…
  • Does Web server protection (WAF) support HTTP/2 in SFOS v20?

    I've been reading some discussions about WAF support for HTTP/2 before. Is it available in the new SFOS v20? Or is it planned for some next MR?
  • Bug in Server access assistant [DNAT]

    Simple test using PING Create a server on local LAN using SAA and ping to it from an outside network. (Default rules wont reply). Steps taken Add an alias to WAN with a 2nd public facing IP. - Mine (Port2:0) Ran the Server access assistant. …
  • SFOS 20.0.0 GA-Build222 DHCP ISSUES

    Hello evryone. after updating Sophos firewall to SFOS 20.0.0 GA-Build222 the DHCP stop relaing ip adress in all network devisies, i try to desabel./enabled DHCP, reload firewall no result. i was oblige to downgrade to SFOS 19.5.3 MR-3-Build652 and…
  • SSL/TLS Decryption rule errors

    Hello everyone, Since v20 I need to disable / enable a SSL/TLS Decryption rule nearly every to every 2 days. It stops processing traffic and on a client device it "feels" like the internet is down. This instantly recovery after disabling / enabling…
  • Sophos Connect ipsec VPN Geo restriction

    In SFOS 19.x or 20.x is it possible to restrict Sophos Connect (remote access) ipsec VPN clients by country without putting a 2nd XG firewall in front of the XG serving the VPN? Example: permit client vpn connections only from Canada.
  • Management Port and Control Centre Status

    Hi. Does anyone know if it's possible to exclude configured network interfaces from the coloured interface status icon on the home page of the firewall? Its purpose is to show at a glance of connectivity problems. However, sometimes it is normal for an…
  • WAF not working after Upgrade to SFOS 20.0

    We have updated our XGS3300 to SFOS 20.0 a few days ago. Since then our WAF ist not working. AH00526: Syntax error on line 106 of /cfs/waf/reverseproxy.conf: Invalid encrypted key AH00112: Warning: DocumentRoot [/sdisk/waffiles/1cf6480d9dcdd33a4319301e0d8ef22b…
  • Sophos Firewall: v20.0 - PXE-Boot Problems

    Hello everyone. I would like to share my experience regarding PXE boot with you. I have already solved the problem with thePXE boot on our old XG2300 v19.5 with the help of the forum and Sophos support. Entered the required options in the DHCP server…
  • SSL Client - No download logs user out (V20)

    Hi all, Upgraded to the new v20 firmware and i'm unable to download the latest SSL VPN client, when clicking download it logs the user back out to the login page. Is the client available for download a different way? Thanks!
  • IPsec Remote Access VPN - Change Client information name (field greyed out)

    Hello Sophos Community, I'm rolling out Sophos Connect Client and IPsec provisioning file via group policies for a customer right now, everythings working fine except for one thing. When the vpn provisioning file is imported to sophos connect client…
  • Blank white screen after login after v20GA upgrade

    Hello, I'm very new the Sophos XG Firewall. Curerntly playing with the home use free edition for the last few months. Today the firewall prompted me to install new firmware V20 GA something. After upgrade and reboot I now get a blank white…
  • Why are SMTP Mail "Reject" events not logged properly?

    I can only see "Reject" events in the GUI when going to Email -> Mail logs. I do not find them anywhere in any of the built-in logs and they are also not sent as audit logs. The other SMTP Anti-spam events "Dropped" and "Delivered" are both logged in…
  • Problem with download speed

    Hey, I have Sophos Firewall for Home installed on my proxmox. I have a 500Mb/s download and 100Mb/s upload connection. Unfortunately when downloading anything from the internet the maximum speed I can download at is 20MB/s it gets to that 20 and is unable…
  • Upgrade to v20 not working

    Hello, I am trying to update my XG 125W from 19.5. MR3 to the brand new v20. Therefore I downloaded the HW-20.0.0_GA.SF300-222.sig from the sophos download servers, because i only have a home license. It is not possible to upload the .sig file nor…
  • Sophos Firewall: v20.0 GA: Feedback and experiences

    Release Post: Sophos Firewall v20 is Now Available The EAP Post: Sophos Firewall: v20.0 EAP1: Feedback and experiences The old V19.5 MR3 Post: Sophos Firewall: v19.5 MR3: Feedback and experiences To make the tracking of issues / feedback easier…
  • IPS update appears to break fb videos.

    Hi folks, last night (my time) the IPS update (18.21.02) appears to have broken FB videos and the login screen. If I use my hotspot the FB access works correctly. Ian
  • Does the new SFOS V20 support i225?

    Does the newly released SFOS v20 support newer fanless PCs containing the intel i225 ethernet chips, WITHOUT resorting to a VM? I suppose this is a resurrection of the question that was answered in the negative for v. 19.x last year in Does Sophos XG…
  • SFOS 20 - Roadmap?

    Hej, i read on the "Known issues" something that is resolved in SFOS 20. Is there already concrete news or a roadmap for SFOS 20? Regards, Michael