I appreciate the fact that Firewall Rules can be grouped, as this makes for more flexibility in the sorting and managing of rules versus not. However... the default option for firewall rules is "Automatic" which if you forget to change, jams it into the…

I would like to see an easy way to move vlans to another port. This will help in moving a heavily used port from one port to another without having to delete the vlan and DHCP scope and recreate it. This would speed up moving vlans across ports. …

If you are having trouble with one of your WAN links, disabling it for troubleshooting would be very useful. Why is this not possible? I've been on calls with SOPHOS Engineers where we needed to do this, and it they were frustrated not being able to.

From time to time, disabling an interface would be very useful in troubleshooting an issue. Why is there no ability to disable an interface. I've had calls with SOPHOS Engineers who also wished this would be possible for troubleshooting. Engineers at…

Why does the DHCP Server not show how many leases are used up in a DHCP Pool. There is also no notification if your DHCP Pool is exhausted either. Would be very useful to know if you were getting close to running out. As far as I can see, there is no…

When you look at your DHCP Lease... why is there no option to: a) show more than 20 lines on the page b) export to excel Instead it shows you the leases one page at a time. Not very convenient.

i would like to allow ip addresses from a company such as cloudflare. however, their ip addresses will be changing. i would like to allow their ASN number so that i don't need to keep track of their ip addresses changes. is this possible?

Curious if anyone's done this or sees value in it. Our current scenario is we have our AD and integrated DNS hosted in an IaaS provider where no "end users" live. We have migrated all of the remaining Windows servers we have to this location. As part…

Hi, when you attempt to delete a group and it is in a firewall rule you are disshown a message advising the that group exists in firewall rules or policies. If the group is in a SSL/TLS rule you are shown a message cannot be deleted, which is not very…

Hello, I have a sophos xg can you share a way to block publicip from scanning for open ports and also how can you blacklist an IP address.

Feature Request: In the SD-WAN Route Section there is no option to filter by users. There is an option to filter by source but not by user. Overall the filtering for the Routes section needs to be better like the rules and policies section.

By default, the agent's port is 161 and the manager's port is 162, but many internet operators here in Brazil leave this port blocked, which makes it impossible to access the firewall's SNMP. How to change this default port?

I've successfully configured our XG Firewalls to push logs to our SIEM solution which works well, though when trying to trace source of DNS requests I can't find anything logged either locally on the XG, or anything on the SIEM other than a UDP port 53…

I had an DHCP renew issue at a site today, but I have seen it at others. This one annoys me because I had to drive an hour to the site. Sophos XGS 87 fed on WAN by FIOS ONT ethernet. Fios rebooted the ONT, because that is what their automated system…

Hi, is there any option to extend column Names in Rules and Policies section, so we can see full name of each rule, rule group ? We need to use filtering to make it clear, otherwise it is one big mess. How u guys workaround this lack of feature ?

Hi Community, is there a way to trigger a poe power cycle on poe ports on xgs firewalls. This would be very helpful to reboot a poe device remotely. Thank you. Kind regards, Chris

Hi, I have been searching the forum. This question has come up many times over the years without an answer. Actually, there is one answer marked as correct stating that DHCP clients never send data to the server. This is obviously incorrect. I…

Hi All, We issue DHCP licenses from our Sophos XGS appliance. Since I specify the pool in the DHCP section in the interface... the XGS should know how many leases are available, and since the XGS appliance hands them out, it should know how many leases…

Is it possible to display only those firewall rules that have this setting for user/group "Any"? I could not find a filter that worked. we're on SFOS 19.0.1

Hello. I have 5 different PPPOE accounts from my ISP .. ISP gave me one fiber modem with Ethernet cable out of it ... I was able to start one PPPoE session without any trouble, but I don't know how to start several sessions on one port. Adding an…

The UTM has an essential feature called "anti-portscan" that is seperate from DoS protection.Anti-portscan, if you are not aware, will detect when a source IP address is scanning the external WAN interface for open ports, and block, drop, or log the source…

Hi, I am wondering if Sophos looking at their appliance portfolio of XGS firewalls and how they compete with their competitors. We entered in few competing bids where we learned that Sophos is worst positioned as branch office SDWAN firewall if you…

Hey all! I'm looking to schedule SD-WAN routes. For example, to send my traffic down one gateway during working hours but then move to another one for the evenings/weekend. It seems schedules are available elsewhere for rules, but not for SD-WAN. I guess…

Does anybody have any clever ways to monitor dhcp pools. I have about 8 subnets/pools setup and it would be really helpful to know when a pool runs out of IP's. The log doesn't show that the pool is exhausted, it just doesn't respond to the client's discover…

I'm in the proces of setting up a Sophos XG on an Intel platform and step by step overcoming the differences I encounter from other FW products I have used. I mainly have experience with Untangle and Ubiquiti products. The plan was to onboard all of…