HI, i am experiencing a strange error after upgrading to latest version. Custom report scheduler is sending multiple emails for a single daily report - i get 10 mails for a single job over a 2 hour span just after midnight. Deleted jobs and recreated…

Hello guys, You know how bad is to receive the alert about a full storage caused by reports! And if you know that, you probably know Sophos's reports are truly weak. I was looking for a way to export complete (Bit by bit of) stored statistics…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Step1: MAC binding in DHCP…

Why is it that Sophos XGS 87 does not send a weekly report even if the configuration is correct Also there was no report tab

Hello, I started to setup Phish Threat for my company but I've trouble with Office 365 that they are opening the E-Mails and links so they distort the reports. I completely copied the settings of this user community.sophos.com/.../501783 but E-Mails…

With WFH scenarios being commonplace now, how can I generate a report to show when a user connected, how long, and from where? The basic SSL VPN reporting only shows data transfer.

Hi, I'm currently looking for a way to better examine logs (on a daily basis) from a Sophos XGS appliance using some kind of centrally managed log aggregation system. I was thinking of using something like the ELK stack, GrayLog or Splunk. Are there…

Hi folks, a couple screenshots about unclassified protocols. Considering these are known services I would have thought they should be classified as one of the first protocols of the block? Why are they still unclassified? Ian

Hi All, I want to know that how can we check which user is going through Sophos proxy toward Internet, Is there any procedure to check in Sophos XG Firewall. Let me give an example - I am LAN user which is using Sophos Proxy in configured…

Got a notification that my config disk usage reached 80%. Any idea on how to purge or shrink the size? Currently on: 19.0.1 MR-1-Build365 Message: Config disk Usage reached 80% exceeding the threshold of 80%

Hello guys. I wanted to understand the cli feature that is in the Sophos documentation. custom-feature - Allows you to add top users to generated PDF reports. Ref.: system - Sophos Firewall What is it for and how can I use it?

Hello everyone, I have some questions and hope you can help: 1. We are publishing some web servers behind the firewall using WAF. There are some "Forbidden" messages and checking the Reverseproxy.log shows OWASP ModSecurity. As we can see only a simple…

I have encountered a remote case with this firewall, the setup and issue is as follows: Firewall model: XGS87 Firmware: SFOS 19.0.1 MR-1-Build365 This is a new firewall that we have deployed. Before installing this firewall the customer faced no…

Hello, We have received the alert notification "Reports disk Usage reached 90% exceeding the higher watermark of 90%". Kindly guide me before doing purge how I can download that data and then purge.

Usually when this happens, there's an gateway outage or a power outage of some kind. However, I checked in on the site and no one reports any issues. I remoted into the site and logged directly into the appliance - everything *looks* normal, and central…

Hello time, I'm having trouble viewing custom reports, Web surfing report, which is only in No record found. Other reports are apparently working, but Web Risks & Usage I don't get any reports. In my NAT rule, Log firewall traffic is active and…

Hi folks, a discussion about the use of XG on board reports and their accuracy. The reports provide a summary of the affect of users firewall rules and polocies along with the XG inbuilt functions. So what is reflected in the reports is effected highlights…

Hello, I have the need to use my firewall's report storage on an external device, such as a NAS for example. It happens that I need to keep the Web Surging report for a period of 1 year, and with the current data traffic, my appliance can keep this…

Hello! I have a Sophos XGS 126 firewall, and the report disk fills up every week. I got emails that the " Reports disk Usage reached 90% exceeding the higher watermark of 90%" and I need to flush the reports disk to work. I disabled the log in all firewall…

Hello, I just migrated a customer from UTM to XG (18.5 since 19 is not recommended by the support) and the default 80GB report partition of the VM is filling very quickly, in about 20-25 days. Logrotate is not well implemented and the firewall got…

I reported this during EAP, but it's happened again. I went to Sophos Central to do some reporting and the last three days of logs are missing. It just stopped. Perhaps this was tied to an IPv6 tunnel (gateway) going up/down or something that confused…

Hi all, I am running the latest version of Sophos XG (19.0) in a HyperV VM. All has been well since installation some time ago, but suddenly I am having issues with the Garner service, and the XG is reporting Service LoggingDaemon stopped. No config changes…

My SG330 (SFOS 19.0.0 GA-Build317) has been running for a long time and was recently upgraded to V19. I don't read reports very often, but today I found all the reports were empty. No matter how long you choose . Where might I look to troubleshoot this…

Hello, I have two ISP router, ISP1 router connected to port 2 and ISP2 router connected to port3. So i want to filter reports by outgoing port (interface), but the report page gives me only the option to filter by rules, source zone or destination…