intrusion attack

Hi all, im pretty new to the sophos firewall i noted that on the dashboard it showed an attack and also checked the logs whcih are both shown below. From this i can see that it was detected rather than...
XG210 upgrade to XGS2100 in HA active-passive configuration

I have a current setup with a pair of XG210 in HA Active-Passive mode and am preparing to upgrade them to XGS2100 in the same HA configuration. I have a configuration backup from the active XG210 and have...
How to create a sample rule for password spraying attacks

Since today we have been experiencing massive password spraying attacks on many Sophos firewalls, especially on the VPN portal, which listens to port 443. Apparently these are attacks from Russia with...
VPN Portal getting hammered by password spraying attacks - Russia and elsewhere

On September 4, our Firewall VPN Portal was attacked from IP 92.53.65.166 (Russia) with hundreds of login attempts for different usernames. After bloicking this, today (September 8) we have been hammered...
Blocking devices from accessing network without vpn

hi, we had an incident where when of our devices had an attempt of access but with failure due to wrong password trials. I an suspecting that this device was on an unknown network outside our organization...