BUG - in screen presentation in firewall rules

You can acknowledge/dismiss the big blue box just by clicking on it.  Should work in all browsers, let me know if you find one that it doesn't.

However the "correct" thing to do is unselect sandstorm.  Users should not try to leave it enabled it when they are not licensed for it.

Thank you for the tip about clicking on it. You can still use Sandstorm even if you don't have a licence, the details according the XG Sandstorm page are sent to Sophos fro analysis, just you don't get any direct benefits but others might from your added input.

Ian

Incorrect.  If you do not have a Sandstorm license then nothing is sent to Sophos.  This has been true since we introduced the feature in 16.5 and continues in 18.0.

In 18.0 EAP2 we will be introducing new Sandstorm reports (EAP1 has the data but not the UI presentation) with further reporting enhancements in EAP3.  I will be doing a big Sandstorm post explaining new stuff when EAP2 is available.

There is an option in Administration, Admin Settings, Sophos Adaptive Learning.  This option to "send app and threat data" has existed from the start, and is used by the AV engine to submit interesting samples to Sophos.  This option definitely improves the overall ecosystem, where detections from one customer can benefit others.

Hi Michael,

and I can add exclusions.

Ian

Yes, I am well aware of the screen.

The big orange bar is trying to tell you that you can configure (we are not disabling the apply button) but that nothing will happen.

I believe that if you are not licensed for Web, or not licensed for Email you will see a similar orange bar in their sections with I think the same wording.

The XG was designed from the beginning that you can access all parts of the UI regardless of license.

Michael Dunn said:

The XG was designed from the beginning that you can access all parts of the UI regardless of license.

Michael, consider to gray-out the feature where a license is missing. Otherwise people do not understand why that feature is not working. For example, in Firewall rule, if you do not have sandstorm feature, the feature is not even tickable.

Thanks

Hi Luk,

here is where I get confused because in my home licence I can tick the sandstorm box.

Which to me indicates that it is functioning.

Ian

Must be fixed!

Must be fixed!

Going from memory from some time ago I think we, home users were advised we could tick the box to send stuff to Sophos, but not get any direct benefit.

Ian