• Finding SIP traffic in logviewer - how?

    rfcat_vk
    rfcat_vk
    Hi folks, I am investigating why one of my VoIP phones has failed. I have searched logviewer and its many sub-menus and not able to find any SIP traffic (UDP port 5060) or even using the ATA's IP address. Please advise how I find the SIP traffic?…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Logging: TLS Inspection log subtype = is not allowed - is showing only allowed traffic

    LHerzog
    LHerzog
    I do not understand why this happens. I noticed it when I was in firewall log and build a filter like this: It does what it should do: If I then switch the log to TLS Inspection, it shows me only allowed traffic. I know that this filter "allowed…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Convert of firewall rule export

    support support16
    support support16
    Hi, is it somehow possible to convert FirewallRule XML export from XG or XGS to some readable form for example to Excel with all needed items like list of all used source, destination networks etc. We need to convert XML to some sort of table form for…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Confused rule id and broken WAF rule.

    Michal Talman CZ
    Michal Talman CZ
    Hi, I'm having trouble with the WAF, XGS 2300 v19.5.1 I add the webserver web .xxx.xxx - it has policy ID 129 . But if I go to web .xxx.xxx in the log it shows that web.xxx.xxx has policy ID 43 . I get a 503 error But the policy ID 43 is spsluzba.xxx…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Central Reporting - is it really working?

    m@x
    m@x
    I keep hearing about the Central Reporting and how all the detailed logging is available through it, which has plenty of data points and filters. We are subscribed to Xstream Protection, which includes Central Orchestration, which includes 30 days of…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Message: Reports disk Usage reached 91% exceeding the higher watermark of 90%

    ciwan
    ciwan
    Hi We're receiving notification almost every day that is stating Message: Reports disk Usage reached 91% exceeding the higher watermark of 90% But when I ssh to it, it shows me 86%. I receive multiple emails in a same day. …
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Firewall logs - where?

    m@x
    m@x
    Log Viewer > Firewall goes back by 10 days or so. I need to retrieve Firewall logs for a period of 2 weeks starting 20 days ago. I've learned that XG(S) do not store log files for Firewall rules. From other posts I've also learned that I should use…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Reporting on Peak Concurrent Users

    ptho
    ptho
    Hi Sophos, I'd like to generate a view and report on how many users are concurrently connected to the Sophos Appliances in operation so that we can spec for a replacement unit. IS there such a feature available? We are running SFOS 19.5. We…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS Firewall: Count of dropped sessions on WAN interface

    Harald Harbauer
    Harald Harbauer
    Hello, are there any options to see the count of the dropped sessions on the WAN interface over a time period? best regards Harald
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Clearing Zero-Day Protection log

    BruceGiles
    BruceGiles
    Running SFOS 19.5.2 MR-2 on an XG310. In the Zero-day protection section of the Control Center, it shows 0 Recent, 274 Incidents, 330 Scanned. When I click on that, it goes to the Zero-day protection logs, and I get two pages containing a total of 38…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Diagnostics>System graphs too slow on Firewall with many network interfaces

    LHerzog
    LHerzog
    On our XG430 firewall we have some interfaces only the active ones are ~40 VLANs, ~40 REDs, ~30 virtual WiFi networks and adapters, ~10 physical interfaces Currently I monitor CPU load from time to time. Unfortunately, due to all graphs are preselected…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Any way to get the real bandwidth Sophos XG under connections ?

    Andreas Wolter
    Andreas Wolter
    Got a Sophos XG Home 19.5 as a VM under KVM and somehow it is bothering me that I do not get the real bandwidth under connections. Lets say I make a download with 4 Megabytes /s, under connections it will show me only something like 2000 KBits/ s, no…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos XG firewall 19.5.0 Logs are not updating on GUI log viewer

    IT Network1
    IT Network1
    logs are not updating on GUI log viewer dis space is not high all services is also running, kindly help how to identify this issue and what action have to take to resolve -
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS Firewall reports suddenly stopped working

    Muhammad Abdullah Siddiqui
    Muhammad Abdullah Siddiqui
    Hi, We are facing issues in report generation. I've checked all the logs and all things seem normal. PFB: Regards, MAS
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Keine Tagesberichte von SG210

    Toni Dirks
    Toni Dirks
    Hallo Sophos Community, wir haben 2x SG210 (Firmware: 9.714-4) Firewalls und bekommen seit einiger Zeit keine Tagesberichte bzw. Wochenberichte von der Firewall mehr zugesandt. Alle anderen Meldungen (Tageskennwort WLAN, Interface Down, Updates usw…
    • over 1 year ago
    • Sophos Firewall
    • German Forum
  • VPN Site 2 Site Bandbreite

    Rainer Schmidle
    Rainer Schmidle
    Unter Berichte / VPN / IPsec Nutzung wird bei uns nur das IPSec für das Homeoffice angezeigt. Wie kann ich einen Report zu den 2 anderen Site 2 Site Verbindungen bekommen? Speziell interessiert mich hier die Bandbreite /Auslastung unserer SAP Connection…
    • over 1 year ago
    • Sophos Firewall
    • German Forum
  • LogViewer log nicht

    NoName NoName2
    NoName NoName2
    Hallo zusammen, ich habe festgestellt das der LogViewer keine Funktion mehr hat. Es sind Regeln vorhanden die mit geloggt werden. Trotzdem kommen keine aktuellen Ereignisse in dem Log an. Der Dienst (reportdb) läuft, Festplattenspeicher ist auch…
    • over 2 years ago
    • Sophos Firewall
    • German Forum
  • Signature disk Usage reached 78%

    satyabrata bastia
    satyabrata bastia
    Hi, we are using Sophos XG-210 now signature disk usage reached 78% is there any way to clear old signature. Thanks satya
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos XG - Firewall Authentication - 2 Benutzer

    Terra Natur
    Terra Natur
    Hallo, ich habe 2 Benutzer die immer wieder im System Log "Authentication" der Sophos auftauchen, die Fehlermeldung lautet: "User XXXXXXX failed to login to Firewall through AD,AD,Local authentication mechanism from XXXXXXX because of wrong credentials…
    • over 1 year ago
    • Sophos Firewall
    • German Forum
  • Anwendungsbenutzer werden nicht angezeigt

    Alexander Ohl
    Alexander Ohl
    Hallo, ich habe eine neue XGS installiert und auf den Clients Sophos End Point und euch die AD mit angebunden. Im Dashboard und Centren sehe ich alle aktiven Clients. Jedoch werden unter Berichte in den Anwendungsbenutzer keine Benutzer angezeigt…
    • over 3 years ago
    • Sophos Firewall
    • German Forum
  • Logs do not specify blocked filetypes. Where do downloads blocked by filetype appear in the logs?

    alan weir
    alan weir
    I performed the eicar test where I attempt to download the Eicar virus testfile. The block page shows that the file eicar.com was blocked by filetype. However, the webfilter log shows that the website was blocked, but does not specify that it was due…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Syslog configuration

    Bigd Last
    Bigd Last
    Hello. We have a FW XG230 which is configuring the Syslog but you want to send the logs through a VPN site to site, the vpn connection is made and policies but it does not send any information. I would like to know where the error could be or how…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Firewall XGS 126

    Ranieri TI
    Ranieri TI
    Good morning guys. Sophos XGS Firewall 126. Is it possible to generate a report on accesses to sites by user over a period of 15 days? I can VIEW the accesses, but when I generate the report, it only generates 1 or 2 days
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Snmp v3 Trap

    FrancescoBattistin
    FrancescoBattistin
    Hi guys, I'm capturing SNMP traps from an XG appliance. Everything works fine with SNMP version 2, but I'm unable to capture traps with SNMP version 3 because it seems that the XG appliance is sending an incorrect EngineID. To detect the EngineID, I'm…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Bandwidth Mbps Report

    Jason Bristow
    Jason Bristow
    Hello, I'm looking for a report that will show me the bandwidth speed over 7 days, 30 days etc. All I can find are reports that show me the total GB's downloaded. Any idea if a report showing the speed per Mbps is available? I've tried looking…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
<>