• Deauthenticate an IP address from DHCP leased

    Ehab Ali
    Ehab Ali
    Hey Dears, I have a Sophos firewall version 19, I want to ask if i can deauthenticate an Ip shown in DHCP leased list to force it to obtain new Ip or disconnect it immediately? Thanks
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • sophos xg125 vpn client with smartcard authentication

    Udo Wack
    Udo Wack
    Dear community, In our company, logging in to the domain will only be possible with a smart card and without entering a password in future. In our case, this is a Yubikey 5. Is there any way to integrate the SSL VPN clients via smartcard? Kind regards…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Maximum limit for authentication server is 20

    Hydro4711
    Hydro4711
    Hello, i reach out to all of you as we are in a really bad situation. We are hosting several customers with active directorys and we just recently started migrating from UTM to XGS. Today we learned, there is a maximum of 20 servers you are allowed…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Integrate synthetic allowlist in a rule without WAF

    Oliver Schnürer
    Oliver Schnürer
    Dear community, As a firewall noob I am wondering how to integrate a dynamically changing list of IPs into an allowlist for a specific firewall rule. As a home user I unfortunately have no access to the "Web protection subscription", only "Base Firewall…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Central E-Mail S/MIME

    Bud Wiser
    Bud Wiser
    Hi, Besides the fact that there is a ticket open already: Is anyone here using S/MIME certs with public CA in Central Email and have customers receiving empty signed or encrypted meeting requests in their Outlooks due to the fact that these are Signed…
    • 4 months ago
    • Sophos Email
    • Discussions
  • Report of missing mailboxes

    Jonas Stadler
    Jonas Stadler
    Hello everyone, Is there a way to find out if incoming / outgoing mails are being blocked in Sophos Central because the mailbox/mailaddress is missing? Unfortunately, I have not yet found a log / report for it. Is it maybe possible to get these logs…
    • 4 months ago
    • Sophos Email
    • Discussions
  • mailbox daily transport report

    Shay Hanya
    Shay Hanya
    Hi Is there a way to get a daily or weekly or monthly report about each mailbox how many mails sent and how many received? Thanx Shay
    • 5 months ago
    • Sophos Email
    • Discussions
  • Change SSH default port in Sophos XGS

    Antonio Ferreira1
    Antonio Ferreira1
    Hi Experts. I'm willing to know if It is possible to change SSH default port to other than port 22 (port range available is 1:65535). The reason is to increase security on SSH access. In Sophos UTM Firewall this change is very simple to do (Management…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • SFOS 20 IPV6 over PPPoE

    CA VAN LOGGERENBERG​
    CA VAN LOGGERENBERG​
    When will ipv6 be supported over PPPoE ? When I use any other router / firewall I am able to get IPv6 over PPPoE just not via Sophos
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Please allow rule renaming

    huang xing
    huang xing
    HELLO When we create a routing rule (or other items that do not support renaming), and feel that the name is unreasonable or needs to be changed for other reasons, we find that the name cannot be modified and can only be rebuilt or copied. This is a…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Citrix Netscaler 2FA Not Working with Sophos XG Web Server Protection

    cromwell uy
    cromwell uy
    As with our current Sophos XGS Firewall Rules and Policies configurations, the Citrix Netscaler 2FA authentication is working. We started planning of using the Sophos XG Firewall Web Server Protection. The license required were purchased and registered…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • WAF rules to stop certain HTTP methods

    Richard Hamblin
    Richard Hamblin
    Hi everyone, I am trying to find out if I can use the WAF rules to stop certain HTTP methods for connections to one of our web servers. I would like to try to only allow GET and POST and deny any of the others such as "DEBUG", "CONNECT", "PUT", "UPDATE…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • XG135 Rev3 Speedstep support and fan speed

    MikeyS
    MikeyS
    Good morning, I've got a XG135 Rev3 that I'm planning on installing XG Home on. Is there speedstep support within the BIOS and is the fan supposed to be controlled by PWM depending on temps etc? It's been delivered with pfsense installed on the unit…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • SSO RADIUS for vpn portal & vpn connect client

    Mathieu Rojo
    Mathieu Rojo
    Hi, My client already use a radius server for authenticated they users. Actually, only the switch contact the radius. I would like to do the following but I don't know if it's possible: Est-il possible de configurer le portail VPN pour que l'utilisateur…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Request for Assistance: Upgrading Sophos Connect via Group Policy (GPO)

    Prateek Singhal
    Prateek Singhal
    Dear Community Members, I am immensely grateful for being part of this wonderful community. Could someone kindly provide guidance on how to upgrade SophosConnect_2.2.90.msi to SophosConnect_2.3.0.msi using Group Policy (GPO)? Alternatively, if there is…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • defining outgoing interface for System Notification mails?

    LHerzog
    LHerzog
    I think I need to SNAT this but maybe there is an other option to define from which interface the Firwall sends it's alert/notification mails and Email Backups? We noticed the mails the Firewall sends internally are now coming from different Firewall…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Suggestion: Set timezone for tenant

    Stuart James
    Stuart James
    In our base partner policy for email security, we have Quarantine Digest set to occur each day at 8AM and 4PM. The problem is that the TIME ZONE is set within the policy and we have different customers in different time zones. To get around this,…
    • 5 months ago
    • Sophos Email
    • Discussions
  • classify banking/financial services in the Application Object

    Guilherme Silva1
    Guilherme Silva1
    Hello, Do you have any recommendations for classifying financial services/banks and bank websites in the Application object? I need to use SDWAN for this type of service, but generally access to these sites are classified as "Secure Socket Layer…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Desinstalación Forzada de SSL VPN Sophos (Semáforo)

    Soporte Sisbler
    Soporte Sisbler
    Buenas tardes, Me pueden ayudar por favor con algún comando o instrucción para forzar la desinstalación de la VPN "SSL VPN Sophos (Semáforo)" de forma desatendida (Remota) en 150 equipos para luego actualizar e instalar a Sophos Connect, Muchas gracias…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Feature Request: Synchronized User ID Authentication for MacOS

    Janek Meyer
    Janek Meyer
    Das synchronized User ID Feature unter Windows ist wirklich super. Es wäre toll, wenn es das auch für MacOS geben würde und man für die Authentifizierung im lokalen Netzwerk nicht den Sophos Authentication Client benötigen würde.
    • 5 months ago
    • Sophos Firewall
    • German Forum
  • Separate MFA field for admin portal login

    J_87586
    J_87586
    Hello, I use a password manager, 1Password, to fill my login credentials for the Sophos Firewall admin login page. I have MFA enabled for the admin users, which requires me to add an MFA code each time I login. This is great, and as expected. However…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS116 FW 20.0 how to logout when connected to wifi via vouchers

    Eva Pavli
    Eva Pavli
    Hello All, I need your assistance regarding an issue I face with an XGS116 FW v 20 with vouchers. To specify, I am able to connect to the wifi via using vouchers, but there is no option for logout button. In addition, I wish to see my remaining…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Scheduled downtime for appliances and tunnels

    Fabio Airoldi
    Fabio Airoldi
    Hello all, I have several firewalls claimed on Sophos Central and SD-WAN connection groups among them. One of the branches will be without power for about two weeks, so the firewalls and tunnels to this branch will be offline. Is there a way to…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • SFOS QoL and feature improvement suggestions

    ll-ben
    ll-ben
    Hi everyone, I'm currently employed by a platinum partner MSP and part of a small team with extensive experience deploying and maintaining several hundred SFOS-based firewalls (and a few leftover UTMs). Over the years, we've witnessed the product's…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • remove items from user portal

    LHerzog
    LHerzog
    Is it still true that we cannot remove unwanted items from the user portal like email in v20? remove "email" menu item from end user portal I wonder how many users create allow and block lists while we do not use that feature and when they only need…
    • 6 months ago
    • Sophos Firewall
    • Discussions
<>