• Validate Server Certificate

    Christopher Kurdian
    Christopher Kurdian
    Hey guys, reaching out for some much-needed help. Have read similar posts but nothing makes sense to me in them. I have purchased a certificate as well as created a local active directory certificate server. (All Witchcraft to me) Have installed them…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Firewall in MTA mode not sending out mails - chapter 2

    twister5800
    twister5800
    Hi, Regarding this: Firewall in MTA mode not sending out mails - Discussions - Sophos Firewall - Sophos Community It's still as issue! - Running SFOS 19.5 Running "perl replace_firewall_id.pl 15 1" (I could see in the SMTP logs that it used…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Update backup schedule settings failed

    Tom-
    Tom-
    Hello, I cannot change Encryption password for local backup. tailf /log/applog.log /log/validationError.log ==> /log/applog.log <== Feb 06 19:24:38Z apiInterface:: Deleting Entity and Event for legacy mode base operation Feb 06 19:24:38Z Request type…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • ACL Violation when attempting WAN to LAN NAT v19.5.0

    Hugh Beavis
    Hugh Beavis
    Hello I have searched and can see others have this issue, however none of the solutions have worked for me so far. I have followed the steps at https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • L2TP slow on XG

    Ben@Network
    Ben@Network
    Hello Community, I'm migrating from a SG550 (UTM) to a new XGS5500 (SFOS 19.5). Both firewalls connected to the same ISP. If I connect to the UTM via L2TP I can copy a file via CIFS with around 5 MB/s, which is almost equal to the bandwidth of the client…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • IP SEC site-to-site terminates and establishes every 2,5 minutes

    dirkkotte
    dirkkotte
    Hi, IPSec Client-SA is deleted every 2,5 minutes. Main-IPSec-SA stay avtive. System: XGS v19.5 2023-01-26 15:58:42Z 20[NET] <STATION010-1|4> received packet: from 109.40.222.222[41135] to 111.222.333.444[4500] (1236 bytes) 2023-01-26 15…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos XG Home Edition and Application signature

    Andrea Gumirato
    Andrea Gumirato
    Good day, I'm using Sophos XG Home edition on VM (Vmware), with free license, version SFOS 19.5.0 GA-Build197 I see that many Windows application are being blocked by firewall, for example Logitech and Nvidia daemons for updating drivers, but even Games…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • WAF backend over IPsec tunnel

    Jan W
    Jan W
    Hello Sophos XGS, 19.5 #1 WAN IP 1.2.3.4 local IP: 192.168.123.1 Sophos XGS, 19.5 #2 WAN IP: 2.3.4.5 local IP: 192.168.131.1 Webserver on #2 local IP: 192.168.131.110 Site2Site IPsec VPN between Sophos #1 and #2 is working. You can ping and reach…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Captcha for User Portal not working

    somename
    somename
    Hi, I have several firewalls on which no captcha is displayed in the user portal, although it is configured. Traffic is coming from zone WAN. console> system captcha-authentication-vpn show Captcha authentication status on the VPN zone: Webadmin console…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • SOPHOS XG 19.5 SMTP to internal server (NOT DMZ)

    Christopher Kurdian
    Christopher Kurdian
    Hey Guys, New to Sophos XG have read a bit of documentation most of which references, External to DMZ(internal) connection. Not External to Internal Network. I am familiar with the old Microsoft Firewall where you would create a publishing rule for…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • TAR import fails

    rfcat_vk
    rfcat_vk
    Hi folks, I have read the various articles any getting any closer to a solution. https://community.sophos.com/sophos-xg-firewall/f/discussions/136793/export-edit-import-selective-configuration I have created a new tar file after editing the exported…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • IPv6 renumbering -how

    rfcat_vk
    rfcat_vk
    Hi folks, my new RSP has assigned me a new /48 for internal use, how do I renumber all my XG IPv6 addresses? Ian
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Speed Download Capped 100Mb/s

    Giovanni Meroni
    Giovanni Meroni
    Sophos XG86 v19.5 Upgrade from 100 to 1000mb/s and my download speed is limited to 100mb/s (very stable at 100mb/s). Upload is 900mb/s If i connect directy to the ISP router all work correctly I already checked Traffic Shaping Setting and Enforce…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos V19.5 - No SNAT but still running ?

    Vu Xuan
    Vu Xuan
    Hello, I'm using XG135 with latest firmware SFOS 19.5.0 GA-Build197. My fw rule for outgoing traffic to Internet like this (rule ID 10): When I look into NAT rule, I see that the SNAT rule for outgoing traffic to Internet has the number of usage…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • User Interface Designer

    Fermin
    Fermin
    Hi, Please, we are on version 19.5 This doesn't make sense... 1,10,12,2,3....
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • How do you unplug the WiFi network interface in a SFOS (XG/XGS) under 19.5 GA

    JuergenB
    JuergenB
    Hi, i would like to know how i can plug/unplug the WiFi network interface by cli? Is there any log where i can see why the wifi nic get´s unplugged? Thanks
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • AD SSO and Kerberos

    balletbob
    balletbob
    HI, I'm trying to get the Sophos XG appliances (SFOS 19.5) talking over Kerberos instead of NTLM. I can't see that the appliance has domain joined - no computer object. There are no SPN records created The appliances FQDN are different…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Bounced test emails to both Yahoo and gmail accounts: "Email has been accepted by Device and queued for scanning."

    alan weir
    alan weir
    Hi all. I have been testing the XG 19.5 GA and 19.0 MR release and so far have run into a few problems. After I setup email alerts for system notification, the XG was able to send out out a few test emails that was successfully sent (according to the…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall WAF Policy Crashing System

    John Groller
    John Groller
    Hello Sophos Community Using the latest firmware as of today (SFOS 19.5.0 GA-Build197) on Sophos Firewall, installed as a virtual appliance in Proxmox 7.3-4. It's a home license, on 4 virtual CPUs (host), and 6GB memory. I'm using the official qcow2…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • VPN SD-WAN terminating the RDP connection

    Alves I
    Alves I
    Hello dear community friends! Next, I created vpns tunnels using SD-WAN routes between the DataCenter and the Branch as shown in the image below. Both firewalls are version 19.5.0 GA-Build197 Note: They are currently disabled, as I returned to vpn for…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • WiFi stopped working after a week with 19.5 GA and XG125

    JuergenB
    JuergenB
    Hi, i upgraded XGS 2100 and XG125 to 19.5 GA. I had some minor issues with VPN S2S and IKEv1. Most feature where fine for a week now. Today at the XG125 WiFi stopped working. Clients get a IP Adress and thats it, no Internet access or other access…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • User portal listen to multiple interfaces

    autinerd
    autinerd
    Hello, I am using a Sophos XG firewall (Version 19.5) and I have 2 WAN interfaces on that (1 active, 1 backup in the WAN link manager). To have the backup line not unused, we use it for SSL VPN (which works without problems). The problem is, that the…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • High consumption RAM and SWAP Memory

    Infraestrutura Unimed SJC
    Infraestrutura Unimed SJC
    Hello everybody, how are you? We are having a problem with SOPHOS appliances, model XG210 after the version upgrade. We were in version 18.5 and upgraded to 19.1 and after this update our appliance started having a high consumption of RAM and Swap, this…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Changes having no effect on 19.5 GA

    duggan1
    duggan1
    Hi, Upgraded a paid of 6500 XGS to 19.5 GA last week without incident. However I've now noticed that any changes I make to the configuration of the firewall do not appear to affect it's operation. To troubleshoot\confirm this I've tried: Disabling…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • QOS Sanity Check : Policy Rules->Individual BW Usage Type->Individual Limit Separately-> Enable

    djdrastic
    djdrastic
    Hi just doing a sanity check for some QOS configuration. I have a site that needs an unauthenticated /24 subnet to connect to certain fqdns and need to throttle individual clients in the subnet to a max of around 10 Mbits (1250 KBits) Setting a QOS…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
<>