Dear Community, i’m forced with tracking some users behavior, especially if and which private sites they access from their company PC (i.e. youtube, etc.) I stumbled upon some problems though. My general understanding is, that the first thing to…

Hi Folks, I notice under source and destination countries most of the pie chart would be 'reserved' and 'United States' but recently is unknown in both cases. If I drill down in unknown, the IP's are US location if I look them up. traditionally…

Hi There We have a requirement to generate a report which tells about network uptime for the past month or current month. Can someone suggest to me how to achieve it? Many Thanks

Hello when I ran from Endpoint, report generator, I am getting all logs but What I need something below. total of hits etc as per domain, this would help us for the total connections per domain/subdomain. Is it possible to generate same report like…

I have a recurring issue where the Sophos Firewall will stop logging certain components. Going through my logs, I now see that it has stopped logging on April 25th. The System, Admin, Firewall and Application Filtering no longer have logs since April…

I Face an issue in Sophos Reports after I upgraded the software to version 20, the reports didn't show any record

Hi, I've noticed a rule change in XG Firewall, but the logging viewer only shows reports for up to a month prior. Are there any other options to find out who made the change? Perhaps using shell commands or something else?"

Hi, could someone help me get a VPN user list from V20? I can't find the option.

Hi! I can use Reports function to discover, for example, how many ssl-vpn accesses a user did yesterday. Is there a way to know if the disconnection, related to these accesses, occured due to timeout reason (set on 15 minuts for default)? Thanks for support…

I have a suggestion for the Sophos Firewall. I would like to have a switch where I can hide entries that are empty or have a 0. Example: messageid="00002" log_type="Firewall" log_component="Firewall Rule" log_subtype="Denied" status="Deny" con_duration…

Hi all, Just a quick question before I use the technical support for this one, hopefully somebody knows and can help me with this. We have been notified by our firewall, which is a Sophos XGS6500, that it's report disk is almost full. We check this…

Moin, ich möchte mir gerne ein Bericht erstellen wann ein VPN User eine Verbindung aufgebaut hat. Leider gibt es keine Einträge auf unserer XGS unter: Auch bei Authentifizierungsereignisse gibt es keinerlei einträge. Gibt es noch Einstellungen…

Anyone else have this issue? community. sophos .com shows up in web filter logs BUT support.sophos.com and www.sophos.com don't. Why is SFOS hiding these logs? I thought it might be some exception but that doesn't seem to be the case.

Hi everyone, is it possible to disable logging for specific (url) categories? For example disable logging for Health & Medicines Financial services I'm new to sophos firewalls and as far as I know it's only possible to add one web policy to…

Hello everyone we are currently testing the shipment of SNMP V3 traps. Unfortunately, we notice that new engine IDs are constantly being sent by Sophos. Sending the traps with V2C works fine. I've been testing all morning and looking at the trap receiver…

We have XG210 with SFOS 19.5.4. I've noticed ips.log filling up /var partition till there is no free space on disk and it causes device to boot into fail-safe mode. Stopping IPS service stops log file from growing but when I restart IPS service, this…

Sophos XGS 3300 v20.0.0: - got the watermark message that the 80% report limit is reached /dev/var 179.7G 142.9G 36.8G 80% /var - when checking the content of /var 12.0K WING 20.0K archieve 235.2M avira4 7.5M certcache 8.9M common-password 1.7M conf 4…

Bonjour à tous, Après plusieurs jours de recherche, je n'ai trouvé aucune solution sur aucun forum. Je vais donc essayer de répondre à vos interrogations pour les futures personnes souhaitant configurer Sophos XG avec Microsoft Cloud Discovery. Étape…

Dear all, Just having a problem creating a scheduled compliance report on my XG125 in a CSV format via email, Steps taken are as follows: Reports > Compliance > 'Show events' > 'System Events' in the table presented I filter by contains 'DHCP Server…

Hello, I'm experiencing an issue where I cannot send email notifications from the Sophos XGS 126 router. The emails remain in the spool folder. from log files 2024-02-12 14:26:00.736Z [4965] 1xZrDX-8Lgj0V-JN == support@s***.si R=router_for_notifications…

Hi folks, a while ago I had issues with SASI not logging all iMaps traffic. The issue has been partially resolved by changing firewall mail rules. A new issue is I receive over 1000 spam messages a day from the same sites via the mail post office…

Hello everyone! I'm trying to configure and use an Office 365 mail server (smtp.office365.com) for email notifications on all of our clients' Sophos Firewalls. However, I'm experiencing issues with this setup. I'm not receiving any test emails or backups…

Hello, I'm trying to import a .tar file exported from a UTM with the current firmware version 9.718005 into an XGS 136, following this guide. However, I keep encountering the familiar error message "The file that you are trying to import is not a supported…

Hi We using de Sophos XG firewall ( XGS3100). In de firewall logging I can see current connections with the amount of consuming data. Is there a way to see this for historical sessions. User X was logged om from time A until time B and consumed a amount…

Hello everyone, I was trying to understand how to make a report of who uses a specific application like Anydesk. In the report I find various categories but I don't understand how to specify the report for a specific application. Thank you