It seems there hasn't been a solution for years: we have two gateways, Port4 and Port5, and we only want to use the gateway on Port5 for SSL VPN. However, the .ovpn file ALWAYS includes both gateways, with Port4 listed BEFORE Port5. We then have to manually…

Hello everyone, since the update to V21 the DHCP relay no longer works. Can anyone help here?

Hello, Need your recommendations, we want to implement a SFTP server to exchange data from and to one of external partners. I am planning to add the server to DMZ group and just restrict FTP protocol to it. Create a NAT rule also i want to force the…

Dead Community, Dead Sophos Team, now with the 2. gen XGS devices, i would like to upgrade my current XGS 107 FW, where i already have a 3 year subscription for Xstream. Is it possible to migrate the current license(s) to the new device without…

I have a customer who has 4 Sophos Switches and 1 Sophos Firewall. He intends to connect them in a ring with Firewall as a Gateway. So here is the planned setup: Sophos XGS Firewall as Gateway with 2 interfaces as bridge mode: Port 1 Bridge Mode on…

Whenever I upload a firmware, and see that banner I'm a bit shocked and ask myself if I clicked the wrong button and the machine will now reboot? Can you change the text so it shows uploading, not applying?

Hello all. I just received my apparently last NFR License for my XG 210-REV3. It's good until the end of March 2025.How do we go about getting replacement hardware? It's such a shame because this 210 is in MINT condition, and absolutely nothing wrong…

I have my certificates in a folder and I'm looking for a script that will update them when there is a change so that waf will continue working without manual intervention. I have very little experience scripting, I can read and understand more or less…

Hello, it seems I have missed something, on all my firewalls "cloud application list" is just empty. Application control is being populated but the cloud part has nothing in list or graphs. Would anyone be so kind to advise? All are XGS 107 with…

Is it possible to download the packet capture created via the GUI?

Hi all, We are having a few problems with our VOIP phones. I believe it may be to the firewall, but I not 100% sure. I need to allow an IP address range and some ports. I have created a firewall rule, but I cannot see that any traffic being logged…

When trying to create a custom web report on one of our XGS136, sometimes it works sometimes not. And If you are using a time frame from 8-10 e.g. no results shown. etc. or when switching from summary to detail, detail does not show anything. …

Hallo Zusammen, ich habe an 3 Standorten XGS Firewalls. A <--> B <---> C A und B sind über eine IPSEC route based VPN verbunden B und C sind über eine Funkstrecke verbunden wie müsste eine statische route auf der Firewall B aussehen…

Hi, I need to set up my v20 OS firewall in active-passive mode. I've already done some configuration, but I'm facing issues with automatic failover due to using "Any" in the NAT rule. Can you provide a straightforward solution using SD-WAN or WAN Link…

Guten Morgen, wir möchten zu unserer Haupt XGS eine weitere XGS an einem Außenstandort anbinden. Bisher haben wir nur alte UTMs angebunden. Dies ist also die erste XGS Anbindung. Beide im HA Verbund Server XGS2300 Client XGS136 Enhanced…

Hi. I need to implement a feature where my client can use the Sophos client with a single connection profile (a single imported .ovpn SSL VPN file) but pointing to 2 different locations . If the first IP fails, it will establish itself in the second…

Hello everyone, I am attempting to redirect all requests made to 192.168.10.5 to 172.16.10.5. The VPN is working properly on both sides. Sophos XGS: DNAT Through Routed VPN Details: #VPN Working 100% LOCAL-LAN: 192.168.10.0/24 (Sophos) REMOTE…

Hi. Anyone has configured Sophos XGS SSLVPN with Active Directory Authentication on AD with enumeration blocked? After configure Server on XGS I can authenticate and retrieve groups/users without problem... My problem appears when try to authenticate…

Hallo, ich hatte vor einiger Zeit eine XG 107w im Einsatz. Was mir dort überhaupt nicht gefallen hat, ist das sehr Träge Webinterface der Firewall. Wie sieht es denn bei der XGS 118w oder 128w aus, ist hier eine deutlich bessere performance des…

Hello Team, i have a problem in this scenario. I have configured: LAN1: (Physical interface) 192.168.1.1 LAN1:0 (Alias Virtual Interface) 192.168.1.242 LAN1:1 (Alias Virtual Interface) 192.168.1.241 ISP1: (Configured on WAN Physical interface…

I got a Sophos XGS126 on a customer site and I need to configure 7 IP TVs. I need assistant to configure those TVs. Since the TVs using multicast addresses is it possible to configure these without multicast addresses because ISP said that configure TVs…

Hello, One of our clients has asked us to block communication to Tor Exit Nodes, in the Applications and Web options in the Sophos XGS firewall I can only see things related to TOR VPN, TOR PROXY and TOR2WEB or whatever... But I cannot see anything…

Hello, everyone. I created a DNAT rule. I receive the communication on the local interface at the SFW's IP address on the LAN and translate it to another destination that is remote on the VPN. I force a SNAT with the SFW's IP address that is assigned…

I hope this message finds you well. I am reaching out to request assistance with an issue I am encountering related to a proxy error with the sophos XG 330 (Fw1=SFOS 17.5.12 MR-1). I’ve noticed that when I try to connect to the web console, I receive…

Hey Folks, some of our XGS FWs have reported by mail, a new firmware update would be available for download/installation. Central instead isnt reporting anything, and still shows firewall is up to date. Even when i upload the firmware file manually…