Hallo community, I've now migrated a bunch of firewalls from SG to XGS. Usually, I didn't encounter to many problems, but now I might need your help. We have a firewall with a lot of webfilter exceptions (like 1000+ URLs). Is there a better possibility…

Hi all, I'm looking for a bit of hand holding and guidance here. What I am trying to do is allow access to internal containers hosting multiple websites and applications. I have a fresh Sophos Setup with no special custom rules or anything yet. I have…

Hello, I have trouble configuring the SPX Portal on our Sophos XG with password specified by recipient. After the email is encyrypted with the outlook addin the link in the mail will lead to the correct host and the corrext port. But nothing happens…

I am using Sophos XGS 2100 Version 20, newly deployed. Everything worked fine however since the deployment Scan to Email would not work properly. The packet is dropped now and then. sometimes it will not go through. I contacted Sophos technical support…

Dear all, Recently, the network of our office appeared slow phenomenon, when visiting some websites, the speed of loading pictures has obvious slow. we also tried to use the laptop to connect directly to the firewall for testing, bypassing the core…

Gday Needed to forward 25 ports to a webserver using WAF. I can't for the life of me work out how to enter in more than one port to either. Surely I don't need to create 25 webserver and 25 WAF rules? Anyone done this before?

Hello community, while migrating a Sophos SG to Sophos XGS, I was wondering wheter it is possible to add the defined web exceptions to a web filter policy? So that the exceptions only count for firewall rules with the appropriate web filter policy…

Hello, I have 2 XG firewalls running V20 (latest) that are not allowing the connection despite being added directly as exceptions below. s3.wasabisys.com ^([A-Za-z0-9.-]*\.)?wasabisys\.com/ ^([A-Za-z0-9.-]*\.)?s3\.wasabisys\.com/ And s3.us-east-1…

Hi Folks, Sophos XG appears to have a bug where it doesn't interact with some SMTP servers properly. In this case Amazon SES (Simple Email Services) cannot be used with Sophos XG for sending Backups. Other notifications work fine but backups generate…

Does this website not work anymore with XG? https://sophostest.com/index.html Running a policy test against just the web policy seems to show the correct result... But this test fails, and even classifies the address incorrectly... Going to…

Servus zusammen, leider ärgert mich die Webserver Protection der XGS gerade und ich finde den Fehler Partout nicht. Die Webserver sind soweit passend konfiguriert. Wenn ich die Firewall Regel (Protect with webserver protection) anlege, und dort als…

Hi! We are currently migrating our Sophos UTM to a Sophos XGS (SFOS 20) and have some issues with the direct proxy mode. We have to use this mode because we rely on per-connection authentication for multi-user hosts and content restrictions which…

Hello, I am getting some unexpected and unwanted requests (trying to find exploits) that are handled by one of the WAF Rules: Here's the WAF Rule that is being it with this traffic: Here's how it looks in the Event Viewer: How can I change the…

Hello! I´ve issues accessing disneyplus.com with web filtering enabled. The site is working, but when trying to register or login, nothing happens, except a spinning circle. However, allowing the specific client to access anything without web filtering…

Anyone else have this issue? community. sophos .com shows up in web filter logs BUT support.sophos.com and www.sophos.com don't. Why is SFOS hiding these logs? I thought it might be some exception but that doesn't seem to be the case.

Hello, We have the problem that users who work from home and only have an IPV6 address cannot use the WAF rules and web server access. Can we allow "any IPV6"? "any IPV4" is allowed. What would be the best approach here? Thank You!

Good day we have configured Web filtering to block peer to peer and torrents... but we still can access the Pirate bay website.. I have also added a category to block the urls , but we still can access the sites.. we tryed opening on private browser…

Hi there, we want to open the url: https://procurement.cern.ch and get the error: 502 Bad Gateway. If I open the URL without our firewall ( at home...) the website will open ! So the problem is our Firewall with SFOS 20.0.0 GA Build 222. I also…

Hi there, is it possible to create an exception for a filetype that should be allowed on a specific website only? We have a webpolicy, that restricts filetypes based on file type category. We want to allow one of that types for a certain website.…

Hi, I need advice how to Deny Direct IP access from browser. So, it only allow access by domain-name. How it done through Sophos Firewall configuration rule? I use Sophos XG 310, SFOS v20.0 Thanks

Hi everyone, is it possible to disable logging for specific (url) categories? For example disable logging for Health & Medicines Financial services I'm new to sophos firewalls and as far as I know it's only possible to add one web policy to…

Hello, I have set up an XGS136 SFOS 20.0.0 at an customer with an OnPrem Exchange 2016, of course set it up with MTA Mode / Reverse Proxy (Thanks for the 1MB Size Limit that is forbidden to edit...) and I am facing issues to set up Quarantine Digests…

Hallo Community, ich habe heute ein Problem mit dem Versand von Quarantine Digest E-Mails festgestellt bzw. eigentlich sogar zwei: 1) Ein User bekam heute einen Digest mit dem Hinweis auf eine Mail, die am 05.Oktober 2023 (!) kam und in der Quarantäne…

Using Web Server Protection, I want a web server to only be reachable from some IP lists or IP host groups. How can I achieve this? In Access permission , Allowed client networks , it seems that I can only choose individual IP hosts of networks. Am…

Hi! We're using web category filtering with Active Directory groups. The proxy logs show that sometimes the user's devices are authenticating on proxy instead of user. The access rights are set to the users, not the devices. Because of this the proxy…