I have the below workflow 1. User will connect to a public network 2. User will be redirected to a landing page provided by Sophos XG 3. User will click on “login” button on landing page 4. He wil be redirected to Auth0 login page 5. Where user will…

Hi all, I got some problems after activating a FW rule via REST-API. It seems as if all "fields" not passed in the request are set with default values !? A simple "enable" of a rule (code see below) seems to set many other fields SRC-IP / DST-IP / SRV…

I cannot remove WebFilterURLGroup <Remove> <WebFilterURLGroup> <Name>Test Group</Name> </WebFilterURLGroup> </Remove> the response is: <WebFilterURLGroup transactionid=""> <Status code="500">Operation could not be performed on Entity.</Status…

Hello, I'm using version v17.5 and I'm trying to update the SourceZones and DestinationZones by adding another zone to each one, but when I try to do that, the old data disappears. I'm using the regular request and it's working great if I want to…

Hi guys, I would like to know what are my options in the API for Policytype parameter on SecurityPolicyGroup: This is what I can see on the docs of V1702.1: <SecurityPolicyGroup> <Name>Group Name</Name> <Description>Group Description</Description…

Hello, When I try to list Security Policy objects (I'm on v1702) with GET Security Policies, I get the error 'Transaction fail' only when I have Rule Group inside it My request is this: <Request APIVersion="1702.1"><Login><Username>xxxxxx</Username…

Hello, We are tying to send this GET message to the API: <Request APIVersion="1702.1"><Login><Username>xxxx</Username><Password>xxxx</Password></Login><Set operation="add"><IPHostGroup><Name>group1</Name><IPFamily>IPv6</IPFamily><Description>xyz</Description…

Hello, I'm using Sophos Firewall - API version 1702.1 When I'm trying to send an API request to add a rule to the firewall I get the following error: Configuration parameters validation failed. for the following reason: /FirewallRule/SourceZone But…

I am trying to make changes to a WAF rule via the API. This is all in relation to a larger effort to automate Let's Encrypt renewals. I have ready many posts on here and found a few smaller github repos with examples but none of them get the entire workflow…

Hi everyone - basic question, is it possible to get the current version # through an API call to Sophos XG? I'm looking through the API documentation, and I don't see it.

Hello, I'd like to automate some tasks with my XG like adding or deleting Web Filter Exceptions via API. This works but after or before modifying the exceptions, I'd like to get a list of all the exceptions that are already present (including the actual…

I've been working with the Sophos XG Firewall XML API and so far I've been unable to access the firewall rule group endpoint that is defined in the docs. My request xmlreq parameter looks like this: <Request> <Login> <Username>admin</Username> <Password…

Im trying to use the REST API to get the current ARP cache entries. According to the API Documentation there should be "Get Dynamic Neighbour Entries" operation but I couldn't find any way to execute this request.

Hi All! Im working with the Sophos XG 1700.1 API looking to create an HTTPBased Firewall policy. I seem to be running into an issue when making the request. response from the request: <?xml version="1.0" encoding="UTF-8"?>\n<Response APIVersion="1700…

I am trying to restart a vpn connection using the xg API So far I have come up with this xml syntax: <Set operation="update"> <!-- Activate the vpn connection --> <VPNIPSecConnection> <Connection> <Name>TunnelName</Name> </Connection> </VPNIPSecConnection…

Hi folks, I've started having a play around with XG. I have a PowerShell script for generating a new Let's Encrypt certificate and updating my various components that use it, and wanted to integrate this with XG Home. It looks like the obvious way…

Hi All, I added the following IpHost / IpHostGroup objects via API -- which are accepted and created in the system -- with the following payload: <?xml version="1.0" encoding="UTF-8"?> <Configuration APIVersion="1700.1"> <IPHost transactionid…

I am searching weather sophos api "update" operation working or not in v17, i had test with 16, it is working

I'm trying to create unicast routes using the API. #This is my 'routes.xml' <Request> <Login> <Username>admin</Username> <Password>admin</Password> </Login> <Set operation="add"> <UnicastRoute transactionid=""> <IPFamily>IPv4</IPFamily> <DestinationIP…

Hi, I can't acess my XG via REST-API no more. This worked fine for a longer time and then suddenly stopped working without changes from my side. API Access Checkbox is (of course) enabled in API -> API-Configuration. When I try to send API-Calls from…

Can remove user groups etc, but not WebFilterURLGroup <Remove> <WebFilterURLGroup> <Name>Test Group</Name> </WebFilterURLGroup> </Remove> Returns the following . <Response APIVersion="1605.1"> <Login> <status>Authentication Successful</status…

I have been successful in making requests using the API to retrieve host ip configurations by making a GET request to the firewall IP address. When I try to use the same XML request in the API explorer I get the error "Only LiveUserLogin and LiveUserLogout…

We have two XG750s setup running in HA mode. This is the current scenario: 1. Radius SSO is working perfectly and authentication works from the WiFi controller to the Sophos device. 2. We tried to enable Radius authentication for the captive portal…

Where can documentation and examples for the Sophos Firewall OS and/or XG Configuration API be found?