Hello. A few months ago, I have created this Sophos-Community-Account, since I wanted to participate in the community. Unfortunately, every single time I post anything, my posts are withheld, and I get the notification, that my account has been flagged…

Hi, We currently have an issue where e-mails from trusted sources. The issue is a changing domain name and mailbox name for example mailbox@em2058.uk.selfemployed.intuit.com where the number after em changes. We are able to add a wildcard exception…

While looking at our FW logs I see UDP packets from internal devices sent to a FW interface with dstport=0. 2023:06:23-14:20:19 FWName ulogd[31041]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule…

<bu.......@s .....com >: host mx-01-us-east-2.prod.hydra.sophos.com[18.217.9.196] said: 554 5.7.1 Service unavailable; Client host [185.242.160.247] is blacklisted. Visit https://www.sophos.com/en-us/threat-center/ip-lookup.aspx?ip=185.242.160.247 to…

YouTube and Facebook access block specify users with static IP address

Hello team, I have a simple HTML page on my website, but your website marked it as Phishing, which caused my website to be blocked. If you can revise and correct it, I would appreciate it. Here is my site URL : www.talentmoversinc.com Thanks in…

Accessing our WordPress website triggers an alert from Sophos: High Risk Website Blocked - Access has been blocked to "secure.nip4head.com". Anyone know where I can find more on this? Could this be caused by a malicious / outdated WordPress addon?

Hi all, we are in the process of moving from the classical Sophos Endpoint Protection and Enterprise Console to Intercept X with EDR and Sophos Central. We have just rolled out on a few test machines and we cannot figure out how to allow the creation…

Hello, over the day we have a lot of block reports from different users in Sophos Central with this URL: 'https://trmcdn.eu' blocked due to category 'Intimate Apparel & Swimwear' I assume, this site is hosting media files for newspapers or so in…

users reported sites not loading showing the error SSL_ERROR_RX_RECORD_TOO_LONG. this is caused by intercept X Web Control function. When I disable this feature, the websites are loading fine. example: https://www.weihnachtsbaum-heidelberg.de…

Hello together! When i want to Download Apps from the Windows 10 Store, only a few MB are downloaded and then the download stops .. In the IPS Log i always found "MALWARE-OTHER Executable control panel file download request" (SID=33942) this Event…

Hi Everyone, Wondered if anyone has any feedback or help on the Sender Genotype functionality? I have been testing it but find 95%+ of the emails that are blocked are genuine? Upon tracking the logs - Example: The sender is using a gmail.com account…

Hello, I currently have a problem with the locking of certain apps. Under "App Groups," I've created a group of apps to be blocked. I've added this app group to a profile as "blocked apps". Also, I have created a client group with devices to get this…

Hey everyone, I thoroughly followed the guide https://www.sophos.com/en-us/medialibrary/PDFs/documentation/utm90_Remote_Access_Via_L2TP_geng.pdf with my test setup of a SOPHOS UTM 9 essentials firewall edition. I managed to get my client connecting…

hello all hoping you can help. We are currently trying out the Sophos web appliance and have run into an issue that I don't seem to be able to sort. When going to a particular https site we get the message below but can go to other https sites without…

Today when I tried downloading an *.iso file, I've got the error "unable to initialize SaviStream object". Does anybody knows how to solve this problem? Here is an screenshot: Thank you in advance! Meghan

Hi everyone, i wanted to configure a new pc. But the Outlook Autodiscover Wizard is hanging at the Point für searching the correct Exchange Server. I search the webfilter logfilter for a block entry and i found it. I wrote an exception, i think so,…

I'm using the software version of Sophos Home UTM on my ESXi server and have three vNICs added. The connections are my WAN/Internal (192.168.1.0/24 router on this network), Lab (10.10.0.0/24), and Lab2 (172.16.1.0/24). If I set a firewall rule to allow…

Hi, I have an internal server (A) and I want to use WinSCP to SFTP to an external server (B). In between A and B is a Sophos UTM 9 appliance. The Sophos UTM 9 appliance has a web proxy set up. There is a firewall rule on UTM 9 that forwards…

Hey, I spend several days - with the settings of the UTM 9. I could stream Amazon Prime Video on two smart TVs for 11 months - until an update end of November 2016. Since than - nothing is working... I can select videos - but they will not start to…

I'm testing Sophos UTM 9 - the home/free version I have a problem in releasing messages from quarantine via Mail Manager. While releasing exists as an option when viewing the list of quarantined messages.. if we select the message we only have…

Since we enabled HTTPS scanning on the web appliance, https based RSS feeds have stopped working. I have added the site certificate to validation and added the site to the exceptions, but this made no difference. Anyone have any ideas?

I have a Sophos UTM setup as router/firewall. It is wired to a switch which then runs to various devices one of which is a TP-Link Archer C7 (being used as wireless AP, assigned internal IP of 192.168.10.3). I'm relatively new to Sophos, but I have…

I have been running UTM since version 8 in 2011. But only recently have I enabled the firewall feature. I have the UTM in bridged mode behind a run of the mill ATT box, which presumably has its own firewall. My questions are these: 1. Are rules only…

hello all, I am trying to connect remotely to another network using VMware Horizon View (PCoIP) over UDP/TCP port 4172. I have created the firewall rule to allow the traffic to go out the firewall to the remote site, but it is still showing up in the…