XGS136 wearing SFOS 19.5.2 MR-2-Build624. Planning an MS365 deployment which will take place through execution of the MS Deployment Tool with a configuration file, as per Deploy Microsoft 365 Apps from the cloud - Deploy Office | Microsoft Learn . …

Hello Everyone, I want to block Facebook website and WhatsApp Web using the Sophos XGS107 Firewall. It is running on latest firmware. Can someone guide me on how I can block these websites using Web Policy. Any help would be appreciated. Thanks…

Hello Im try to block a url used sophos firewall (Ver. 19.5.1) according to this KB my config step is 1. Create a Web Categroy and add the url 2. Create a Web Policy and active block the category http / https 3. Create a Firewall Policy…

- Web -> HTTPS decryption and scanning -> HTTPS scanning certificate authority (CA) -> "Default" cert in settings - Profiles -> Decryption profiles -> Block insecure SSL -> "Default" cert in booth Re-sign settings - what is in use -> "SecurityAppliance_SSL_CA…

Hi, after our installation of the firmware SFOS 19.5.2 MR-2-Build624 we have problems with sides with the follow error: Dropped due to TLS engine error: messageid="19006" log_type="Content Filtering" log_component="SSL" log_subtype="Error" severity…

URL: https:\\anywebsite.com:4444 -> Webfilter matching (Warning) -> I confirm the warning -> FW redirecting back to the original URL -> Port 4444 is cut away (I guess same with any other non-default web ports). Feature, bug, known?

my machine is XG125 (SFOS 19.5.2 MR-2-Build624 , I had tried to block facebook using webpolicy.policy tester shows that site is blocked but i'm getting the page.

any one can help me? please.... is there any way to block download exe files over browsers. if any one has answer please describe it step by step. i have xg230 with firmware SFOS 19.5.2 MR-2-Build624. i already do web policy and i blocked http…

We've recently installed WatchGuard EPDR and it's failing to download updates. Their support guys have provided a list of URLs that need to be accessible and I've had a go at allowing access through the XG Firewall but they're still inaccessible so I…

Hello community, I have switched from UTM to XG and now I have the following problem with pubic trusted certificates in other zones than the default internal zone. I have configured and uploaded the certificate successfully in the XG appliance,…

Hello All, I'm trying to set up a block page using web policy but I can't quite get it to work. I think I know where the problem is and how to fix it but I would like to see a different solution than the one I have now applied to a test environment…

A while ago, I raised what I think is a serious issue with the web filter here: Web Filter Bypass Issue with URL Groups I did not receive any updates other than in the discussion, and apparently it was never fixed (my concern was that malware or users…

Hi all, I was playing with SSL/TLS decrpytion and it breaks RDP connecyions with error "The Local Security Authority cannot be contacted". The only exception that works is if I make the excpetion for the address I am connecting to, which is extremly…

Hallo Zusammen, Ich habe kürzlich eine neue Sophos XP - zuvor arbeitete ich mit Sophos UTM. Nun wollte ich einen Webfilter Ausnahme machen. Mit der Sophos UTM kein Problem, aber bei der XG stecke ich fest :-) Habe es 1:1 übernommen. Ich habe unter…

Hello All, I recently got a new Sophos XP - previously I was working with Sophos UTM. Now I wanted to make a web filter exception. With the Sophos UTM no problem, but with the XG I'm stuck :-) Adopted it 1:1. I entered the filter under Web - Exception…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview What is TLS/SSL Inspection…

On my old PC I had this issue where I couldn't download anything from the Microsoft store or the Xbox app. I bypassed the firewall and everything started working, so I knew the firewall was blocking it. I messed around with the firewall and ended up making…

Dear All, I have recently deployed a virtual Sophos, it is acting as Direct Proxy behind a internet firewall, and i put the virtual Sophos on proudction, end user computer enabled proxy in their browser and everything work as expected, and after a period…

Not changed a thing on XG, even downloaded these drivers, using the same application, several times in the past. For the first time in weeks, I haven't had to mess with anything. This worked just fine before. I even have a 'Safe Downloading' exception…

Hallo, der Verbindungsaufbau mit dem OpenVPN Connect Clinet hinter des UTM schlägt fehl. Es liegt an der Webprotection. Schalte ich diese ab und erlaube Web in der Firewall funktioniert die Verbindung. Den Port 1194 habe ich schon in den Filtertüten…

Hallo Community! Seit ein paar Tagen haben wir das Problem, dass eine für uns wichtige Homepage blockiert wird. Der Betreiber behauptet, dass von seiner Seite her alles in Ordnung sei. Wenn ich es von zuhause mit meinem privaten Internet probiere, funktioniert…

Hallo zusammen, ich habe vor 3 Tagen meine Sophos XG aufgesetzt und soweit funkioniert alles. Nun habe ich versucht die SSL/TLS-Inspektion zu aktivieren. Ich habe mir das Zertifikat zunächst in meinen Browser geladen und dann noch auf meinen PC…

Hallo zusammen, wir haben das Problem das die Sophos bei HTTP Seiten aufrufen den Benutzer Warnen soll. Dies geschieht zwar auch aber nicht wie gewünscht. Wenn ein Benutzer eine HTTP Seite aufruft wird er weiter geleitet auf eine IPS Warn Seite die…

Firstly i want to thank you for your support which helps me to understand the problems. i have some questions about XGS2100 (SFOS 19.0.1 MR-1-Build365) . some users was using the outlook for our exchange and email and it still working without any…

Hier wird eine XG135 als Mailgateway für einen Exchange 2016 Server verwendet. Gibt es auf der Firewall die Möglichkeit eingehende Mails per Regel an ein weiteres Exchange Postfach weiterzuleiten? Also der ursprüngliche Empfänger soll die Mail kriegen…