I would be interested to see how other people have implemented application control policies in their environments
The majority of our customers have a standard stack of Windows 10, O365, DattoRMM and Sophos. In some cases, clients may have custom Windows…
Application Control Updates Release Notice
This is a notification for the latest Application Control 5.89 data update, which has been rolled out on the 7th December 2021
Application name
Type
Owner
Windows
Microsoft OpenSSH…
I have a few PCs I want to lock down from accessing anything but a few URLs and applications. I have created a firewall rule that blocks traffic and provided exceptions for the URLs I want access to, but when I try to launch the Microsoft Teams app on…
Application Control Updates Release Notice
This is a notification for the latest Application Control 5.88 data update, which has been rolled out on the 26th October 2021
Application name
Type
Owner
Windows
Getscreen Me…
Hi,
I have an XG125w (and before that am XG106) with SFOS 18.5.1 MR-1-Build326. When I go to the log viewer, Application Filter tab, the log is empty, It has always been empty, even with the XG106. I checked my firewall rules and they are all set to…
Hi folks,
I have been investigating an issue with my Apple devices using an application called manual proxy surfing.
The strange behaviour is if I block proxy and tunnel then I get error rs in the application log and in the daily reports. If I don…
I've noticed that Sophos classifies 1Password as, among other things, a "Loss of Productivity" application. In fact, it may be a high productivity application that encourages security. And I notice that LastPass -- a similar application -- is not categorized…
Hello Community,
Currently we are blocking all powershell interaction on all clients in our company via the Application Control feature in sophos central.
We are aware that a lot of applications are using powershell for updating their services and…
Is there a way with my XG, that I can require that users use specific, sanctioned browsers? Standards are being applied across the organization, and would like to ensure they are using sanctioned user agents.
Exploring on my own:
The Applications…
Hi,
aynone an idea, why shrew soft vpn is blocked by the xg 330? I tested it with my "All you can do token", where everything is open, but xg is blocking the traffic to a external fritzbox.
A computer in the vlan 100 want to connect to a fritzbox…
Hello!
Skype chat (normal version, not business) does not work on our network, video calls work fine, as well as Microsoft Teams which works perfectly (chat included).
We have been checking firewall rules, FQDN host groups and it still does not…
I have added a Firewalla device to my network so that I can control device access (shutting off established connections for example). I am trying to troubleshoot something in the device that isnt working (a block against a group didnt work, but should…
Application Control Updates Release Notice
This is a notification for the latest Application Control 5.87 data update, which has been rolled out on the 14th September 2021
Application name
Type
Owner
Windows
Amazon Music…
Hi,
beside all the existing meeting tools, some of our users are starting to evaluate something called MeetAnyway.
This tool establishes peer to peer connections on high port ranges if there are less than 4 attendees. Described in the documentation…
I am having an issue with the NFL app on my network. We have a firewalla device in front of the xg. I set the firewalla to not monitor traffic on a device.
I don't see anything that stands out (looking at the web filtering for example) as to why it…
Hi,
Dear All,
I am not able to block Psiphon proxy using through mobile after blocking all the tunnel / proxy / vpn base applicartion. I have also enabled https decriptions.
If any more solution is ther ekindly help!
We have a customer that we just put a Sophos XGS 116 firewall in to replace a PfSense. They have a business partner that has a Wireguard VPN tunnel that they use to connect to a remote NAS. The Wiregaurd VPN runs directly on the remote NAS. Our customer…
Hi, I was using to block Tor "proxy and tunnel", "anonymizer", "can bypass firewall", "tunnels other apps", few years ago it was working to block it, but not any more, does anybody have any idea what to do? thanks.
Hello Guys
We came across this issue. One of our clients wants to block all VPN traffic that goes through his XG Firewall, except from Ivacy VPN and Radmin VPN.
Can you please help?
Thank you
Application Control Updates Pre-release Notice
The following have been identified as applications that would benefit from some level of control and will be added to the existing list.
Note: These applications will be automatically blocked for customers…
A while after updating to 18.5.0 MR1 this morning, we noticed we're not getting incoming mail from Apple iCloud. I kept assuming it's an issue with TLS or something, but email worked on my iPhone when I turned off WiFi and went with cellular.
In the…
Slider states:
Policy is bypassed
None of the settings of this policy will be applied to assigned targets. They will get their settings from the highest priority policy they are assigned to and which is not bypassed. If you want to deactivate…