IPv6 Country Block WAN to LAN strangeness

Hello, Since the XG Firewall does not have countries for IPv6, I have created my own countries based on published IPv6 address ranges which can be found here https://www.ipdeny.com/ I created a LAN...
Issue with Third-Party Threat Feed Not Blocking WAN to LAN Traffic

Hi, I’m using a third-party threat feed with Sophos and under the impression that it should provide WAN to LAN protection. However, I’ve conducted a test and observed unexpected behavior. Here’s what...
Ipsec and mss-clamping. Is there a way to make them persistent?

Hi all, I have an xgs 3100 firewall on which about 20 ipsec tunnels are attested. All these ipsec have fragmentation problems so I am forced to use mss-clamping. For example without mss-clamping an...
High availability upgrade to a different firmware version

I have a question regarding updating a HA setup from Firmware SFOS 19.5.3 MR-3-Build652 to SFOS 20.0.2 MR2-Build378. Since this is an update to a different version, does the same principle apply here where...
how to enable SFOS authentication with different UPN and SamAccountName

I have learned how to support UPN or multi UPN configuration with local Host / DNS registrations on the Firewall directly. I have configured that successfully on the firewall. Sophos Firewall: Authentication...