• RED Modes

    CreateShare
    CreateShare
    Hi, I read about all red modes but could not find a way to let the network behind RED Devices use the internet from their local internet gateway but take the web filter policy from the Firewall. Is it possible? Thanks.
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • ICloud Private Relay blockieren

    MRXLENN
    MRXLENN
    Hallo Zusammen, ich versuche aktuell das ICloud Private Relay in meinem Netzwerk zu blocken/verbieten (damit hier auch über Safari die Policy greift). Hierzu habe ich folgendes herausgefunden, man muss diese beiden URLs blocken: mask.icloud.com…
    • 3 months ago
    • Sophos Firewall
    • German Forum
  • Sophos XGS 136 Blockseite wird nicht angezeigt

    ChrisV
    ChrisV
    Guten Morgen zusammen, wir haben diverse Websites gesperrt. Leider bekommen wir aber die Meldung, dass der User sich anmelden muss um die Website zu besuchen. Die gewünschte Meldung wäre aber diese hier: was müssen wir einstellen, damit die…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • German Forum
  • Best Whitelisting Method: Web Policies vs Firewall Rules

    iamroot
    iamroot
    Hello everyone, I'm trying to understand what the best or correct whitelisting method is. Scenario: I need to whitelist URLs for a new application. Method 1: Firewall Rule 1) Create FQDN Host: *.example.com 2) Create Firewall rule Source…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • XGS: Ebay Login blockiert

    Revan
    Revan
    Guten Morgen, seit einigen Tagen ist der Login bei eBay mit der folgenden Fehlermeldung deaktiviert: Stop! This Download is blocked. Wenn ich ebay.de auf die Liste der Ausnahmen für die SSL/TLS Inspection setze kann ich mich wieder normal einloggen…
    • 3 months ago
    • Sophos Firewall
    • German Forum
  • Problem with NET::ERR_CERT_AUTHORITY_INVALID still present?

    Andrej Pirman
    Andrej Pirman
    Hi, I have ONE of 3 new installs of XGS-126 having long known problem with Sophos CA certificates on some popular URL addresses. For example, users cannot download Google Chrome: I guess problem is HSTS, where browser detects MITM, which is Sophos…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Blocked Website

    WichF
    WichF
    Hello, currently I have a problem with my sophos XGS Firewall. I would like to allow a specific Website for our marketing department. tiktok.com I also add this site to "Allowed URLs for Default Policy" and "Local TLS exclusion list" but nothing happened…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • An error has occurred in resolving the URL, please update the URL and retry the policy test.

    n4shito
    n4shito
    Greetings community. I have an XGS126 device (SFOS 20.0.0 GA-Build222) I'm trying to do a policy test on google.com, facebook.com, and I get this message: An error has occurred in resolving the URL, please update the URL and retry the policy…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • FILT-APP Block Office365 SOPHOS XGS

    Mathieu Rojo
    Mathieu Rojo
    Hello, I have recently see my officesetup.exe installation blocked when I activated the app-filter based on this policy "Block generally unwanted apps" on my LAN TO WAN firewall rule. This blocked was manifest juste after launch the officesetup.exe…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • TLS Inspection | OCSP / CRL | Not blocking websites with revoked certificates

    Daniel Neto
    Daniel Neto
    Hi everyone, I'm enforcing my TLS inspection rules to more strict and secure with best practices. So my Decryption Profile: Using https://badssl.com/ for tests scenarios I had success in almost all practices: invalid date working as…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • captive portal without login

    Quallensaft
    Quallensaft
    Is there any way to implement a captive portal without any account or guest login? Just a disclaimer -> confirm -> web surfing allowed?
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Webfilter debian deb repositories "Malware 'Unscannable"

    LHerzog
    LHerzog
    We're having some strange issues currently only reported for debian repositories. When trying to download random files from there with browser or wget - the requests randomly seem to time out and / or users get a STOP message from the firewall. Sometimes…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Wifi Connected ICON shows offline

    LSG Admin-Venket
    LSG Admin-Venket
    Dear Team can anyone tell us which Web policy blocks or enabled the identification of wifi connected icon in the taskbar. We have to implement tight restriction in our environment due to the fact of education institution. But enabling the policy now…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Troubles with tracking activities of a user

    ThoFe
    ThoFe
    Dear Community, i’m forced with tracking some users behavior, especially if and which private sites they access from their company PC (i.e. youtube, etc.) I stumbled upon some problems though. My general understanding is, that the first thing to…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Website Problem

    CreateShare
    CreateShare
    Hi, One of our users is continuously facing a problem with a website. After logging in to the website and using it for a little time, it starts showing "Wrong requested URL!" Page couldn't be found!. He tried using different browsers but same. Is…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Block search words in XGS2100 not working

    Junaid Farooqui
    Junaid Farooqui
    Dear all, For some reason the search block policy is not working. Attaching screenshots from categories, policies and firewall rule.
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Freigabe einzelner Webseite (Unterseite) und nicht gesamter Domain

    DanielM
    DanielM
    Hallo, ich suche in unserer XGS2300 ( SFOS 20.0.0 GA-Build222) die Möglichkeit, eine einzelne Webseite (Artikel oder zum Beispiel YouTube Video) von der Richtlinienprüfung auszunehmen. Wir haben bei uns den Webzugriff auf diverse Seiten über URL…
    • 5 months ago
    • Sophos Firewall
    • German Forum
  • Sophos Firewall: Blocking Download by File Size

    Nushrat Sahana
    Nushrat Sahana
    Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Configuration Web Policies…
    • 5 months ago
    • Sophos Firewall
    • Recommended Reads
  • Youtube restriction by channel - sort of works

    Dave_WebNanny
    Dave_WebNanny
    Hi My kids have to use chromebooks as that is what school issue so I am stuck with Chrome browser. I setup new web category and added keywords for the channels that they can watch without time restriction and another one for domain. I think when…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Customer having trouble with Quickbooks Payroll Updates after Sophos XGS87 Firewall install

    Ben Woolley
    Ben Woolley
    I have followed the suggestions listed here by adding the URL Pattern Matching exception and HTTPS Decryption and Malware and Content Scanning. QuickBooks Updates failing He is still unable to process payroll. Is there anything new that any of you…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Zscaler can conflict sophos firewall web policy

    DevK
    DevK
    We have Zscaler & SOPHOS XGS2300 in our network after creating web policy and to on any rule internet getting down
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Migrating webfilter exceptions from SG to XGS

    Luis Prunn
    Luis Prunn
    Hallo community, I've now migrated a bunch of firewalls from SG to XGS. Usually, I didn't encounter to many problems, but now I might need your help. We have a firewall with a lot of webfilter exceptions (like 1000+ URLs). Is there a better possibility…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Network slow issue and firmware upgrade issue on the XG310

    Derrick Zhong
    Derrick Zhong
    Dear all, Recently, the network of our office appeared slow phenomenon, when visiting some websites, the speed of loading pictures has obvious slow. we also tried to use the laptop to connect directly to the firewall for testing, bypassing the core…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Webfilter Exceptions and Policies

    Luis Prunn
    Luis Prunn
    Hello community, while migrating a Sophos SG to Sophos XGS, I was wondering wheter it is possible to add the defined web exceptions to a web filter policy? So that the exceptions only count for firewall rules with the appropriate web filter policy…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 125 dropping Wasabi Cloud Storage despite Exceptions

    theunknowknows
    theunknowknows
    Hello, I have 2 XG firewalls running V20 (latest) that are not allowing the connection despite being added directly as exceptions below. s3.wasabisys.com ^([A-Za-z0-9.-]*\.)?wasabisys\.com/ ^([A-Za-z0-9.-]*\.)?s3\.wasabisys\.com/ And s3.us-east-1…
    • 6 months ago
    • Sophos Firewall
    • Discussions
<>