Browse By Tags

  • Webfilter Block advertisment - no reason why blocked

    Hi, i do have a problem with the settings of blocking the category "advertisement" in the web policies. If our users use google to search they will get the google advertisement links first. This should be blocked, correct. In our policies the category…
  • How to report mis-categorized (by Sophos) URL?

    Was researching Bosch heat pumps -- they're a pretty famous company -- and found the URL: http://bosch-homecomfort.com is flagged as "Personals & Dating", I'm guessing because a regex on "comfort" or "home" matches, but who knows. The STOP page…
  • Allow block site for user

    A user is trying to connect to https://help.virginatlantic.com/gb/en.html which is in travel category and allowed in rule But on browser user get message that site is blocked by sophos . By Checking the log i Find one of my rule that is for to drop…
  • Synology NAS Update blocked by Web filter (Example Exception)

    If you have a "strict" Web Filter policy, chances are your update download after the Synology DSM 7.x Update will be blocked. Either create a web filter exception or remove the categories from your web filter policy. Example Exception: Matching…
  • Is there any way to perform web filtering for Guest WIFI network ? for BYOD devices?

    Hi We have XG firewall on our locations. Is there any way to perform web filtering and SSL inspection without certificate warning for https web sites on mobile devices? Guest users don't have certificates installed and can access every site. Re…
  • Modern notifications via Office 365 in Sophos XG

    Hello, How to configure Modern notifications via Office 365 in Sophos XG ? Thanks
  • Sophos Testseiten und TLS Inspection

    Hallo, auf einer XGS (19.5.1) versuche ich URLs aufgrund der Web Category zu blocken. Ich blockiere die Kategorien "Command & Control" und "Spyware & Malware". Nun versuche ich die Sophos Testseiten aufzurufen: https://sophostest.com/spyware…
  • Sophos blocks Google Translate

    When I try to access google Translate the firewall blocks it for category "proxys and translators" I can't find such a category in my webfilter rules I also did a policy test and it came back positive And in my "Default Workplace Policy…
  • Sophos FW XG SSL/TLS Decryt - game Diablo 2 not connecting to server

    Hello everyone. I have Sophos XG in my home. I created all the rules and activated all protections IPS , ATP , SSL/TLS Decrypt etc. In local TLS exclusion list i added Battle-net , Blizzard and other games i play. When SSL/TLS decrypt is on Diablo 2…
  • Logging not showing traffic for a certain rules or traffic type

    We are having something happen on our Firewall which we are implementing and can't quite get our head around it. We have traffic coming from some clients. HTTPS specifically. We have a rule which allows HTTPS traffic from the clients IP to the WAN with…
  • SSL/TLS inspection - Dropped due to TLS engine error: OUT_OF_MEMORY[201]

    Hello, I have problems with a few clients to access some pages. In the browser appears a SSL_PROTOCOL_ERROR. In the log viewer in the module SSL/TLS inspection appears the error "Dropped due to TLS engine error: OUT_OF_MEMORY[201". For some the error…
  • Web Policy Override

    Hi, I read the documentation and even got it working to an extent, but not completely. I set up an override with a code so I could override policies if and when needed. After I set it up, I go to a site, am blocked, but it seemed to ask for my credentials…
  • external url Database Sync / Web Categories

    Hi, i would say if there are any updates about this: Categories - External URL Database Sync - Discussions - Sophos Firewall - Sophos Community
  • Can't print with IPPS.

    I can't print when Mac and Printer are connected through XG Firewall's bridge. Mac - XG br0 - Printer I can print by disabling SSL/TLS engine. Or I can print by disabling IPv6. IPPS (Internet Printing Protocol over TLS) is used for printing. When…
  • Sophos Xg Firewall Target Domains

    HI on old sophos utm9 in web protection - filtering options -exception list under target domain I could enter the string ^https?://([A-Za-z0-9.-]*\.)?adobe\.com/ on the new xg firewall under web categories/ domain/keyword this string ^https?://([A…
  • HTTPS decryption: Some users cannot browse site: Certificate expired yesterday

    We're having a strange situation again after it happened last week already on our SFOS 19.0.1 XG430: Some users browse to a website that has no exceptions on our firewall for decryption. The browser (firefox or chrome) show an error that the site…
  • Anyway to bulk enable Exceptions under Web -> Exceptions

    Just imported the Office 365 templates (All services) as per method 2 below and the process to manually turn each one on is. Sophos Firewall: Configure web exceptions for Office 365 .
  • enable Whatsapp audio/video calls and chat on Sophos XG

    Hello, this is how you can enable users on the LAN to use Whatsapp chat, audio calls and video calls. Menu "rules and policies". There I have set up my default web access policy: LAN any to WAN any - only http, https, imap, imap-s allowed. …
  • How to setup Sophos Firewall "rule policy" to show the Sophos site blocked warning message in a browser?

    Hi Tech Team, I would like to have the warning screen in every occasion that a site has been block. (one just in case it's a false positive and 2 to keep testing and adjusting the system). I'm puzzled how this is complicated, as normally we would…
  • "Blocked due to using client certificate" error in SSL/TLS Inspection Log and how to bypass

    I have an application, Parallels Access, that as part of its login process connects to different Parallels websites. I am getting the error "Blocked due to using client certificate" that then fails the connection, and I can't log in to the Parallels server…
  • HTTP Pipelining in XG

    So I have an application *cough* game *cough* that still utilizes pipelining. I know that it is not supported in XG based off a two year old thread that's locked, but it was noted that you can create exceptions without having to resort to changing from…
  • Sophos Direct Proxy behind internet gateway did not work

    Dear All, I recently deployed a Sophos XG with version 19, i want this Sophos to act as direct proxy and behind the internet gateway, below are the configuration i created, and i tested with proxy enable on one of the user computer with proxy setting…
  • how to bypass SSL/TLS in SOPHOS XG

    hi, i have XG430 , created a firewall rule and selected with following web filtering checks: Block QUIC protocol Scan HTTP and Decrypted HTTPS Scan FTP for Malware Decrypt HTTP during web proxy filtering. SSL and TLS inspection is enabled when user…
  • Unable access specific website even without applying any web/application filter.

    Hi. Unable to access the website www.sbicard.com I used a naked policy without any Web/Application filtering. Also used AllowALL category, but Still I'm unable to browse it. Policy test allows the website. DNS also resolves the website I tried…
  • Importing Exceptions into Firewall Template

    When setting up a new firewall, we import O365 exceptions into the configuration. Is it possible to import all of the Office 365 exceptions into a firewall template? This is the documentation we normally follow to import the exceptions. Sophos Firewall…