• Slow Browsing - XGS 4500 HA Version 20 GA

    Speedfish
    Speedfish
    Hello, we are experiencing some loading time issues with browsing though the web (slow browsing). The browser software doesn't matter here (Firefox, Edge, Chrome etc.) Quite often there is a loading time up to 10-15 sec for opening a normal website…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • IPSec to Azure

    Chris Wood
    Chris Wood
    Hello! We are an MSP with about 20 clients that have servers hosted in Azure. These 20 clients have various hardware models of Sophos XG and XGS firewalls with various steps of firmware from 19.5.3 to 20.0.22. Those firewalls have an IPSec site to site…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • HA failing after Sophos upgrade to V.20

    eFrancis
    eFrancis
    After firmware upgrade from v.19 to v.20, HA failed to work and currently we are running on one FW.
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • V20: SFOS Automation SDK (Python) - Working Example for L3-Rule create

    Guenter
    Guenter
    Hi, I need a working Example how can I create a simple Any-Any Allow L3-Rule on a V20 SFOS using the Python SFOS Automation SDK. This: rule_params = rule_params = dict( rulename="Allow Any-Any", description="Test change automation", action…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Port forwarding WAN to Route based VPN

    Geniux
    Geniux
    I have 2 XG ver. 20 firewalls between 2 sites, both with Static public IP. There is a SDWAN route based VPN between the 2 sites, and it works perfect. the roude precedence is SDWAN, Static, VPN. I am trying to publish an internal server resource that…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Reports

    Mostafa Helmy
    Mostafa Helmy
    I Face an issue in Sophos Reports after I upgraded the software to version 20, the reports didn't show any record
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • VPN user list with email-id

    Kiran Jedhe
    Kiran Jedhe
    Hi, could someone help me get a VPN user list from V20? I can't find the option.
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • SFOS AD SSO not really working

    Steve Weißflog
    Steve Weißflog
    Hello, we are migrating a lot of customers from UTM to XGS/SFOS. With UTM the customers used AD SSO for authentication for web protection (different AD-groups and webfilter profiles). With UTM we never had any issue with AD SSO! Now with SFOS we ALWAYS…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • IPsec Remote Access VPN - Force specific traffic through VPN

    DavidSain
    DavidSain
    I reviewed this : Force specific websites through VPN tunnel? This works for SSL VPN. However adding a host IP under IPsec Remote Access does nothing. Also cannot add an FQDN host under IPsec Remote Access under v20. Is there any way to get this…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 136 Firewall SFOS 20.0.0 GA-Build222 IPv6 No Internet

    Erika Koelle
    Erika Koelle
    Need some help getting our Sophos XG 136 (LAB) Firewall working with IPv6. ABCDC01: Role = Windows Server 2019 Domain Controller IPv6 = fc00:2222:3333:4444:cccc:dddd:eeee:10/64 IPv4 = Not Enabled Gateway = fc00:2222:3333:4444:cccc:dddd:eeee:ffff…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Scan to Mailbox packet drop every now and then

    Izuchukwu Edeh
    Izuchukwu Edeh
    I am using Sophos XGS 2100 Version 20, newly deployed. Everything worked fine however since the deployment Scan to Email would not work properly. The packet is dropped now and then. sometimes it will not go through. I contacted Sophos technical support…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Site-to-Site VPN Issues

    Alan Spark
    Alan Spark
    I am testing a new XGS 136 (SFOS 20.0.0 GA-Build222) offsite to replace an onsite XG 135 ( SFOS 19.0.2 MR-2-Build472). The backup of the XG 135 was used to setup the XGS 136. We have never used the IPsec Site-to-Site connection before but may have a…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • CPU Consumption is high

    DevK
    DevK
    CPU Consumption is very high some time it is going up to 98 % I Stopped Below Highlighted service after that CPU is under control but the AV & IPS Services are Required for Firewall. stop the required services is not a good practice
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • I see a new entry in DoS protection called "IP Flood"

    alan weir
    alan weir
    Sophos v20 GA I have never noticed this IP Flood protection before. It is not applied, but I cannot see it's activation anywhere in the GUI. All I see activatable is SYN, UDP, TCP and ICMP, Dropped source routed packets, Disable ICMP/ICMPv6 redirect…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 125 dropping Wasabi Cloud Storage despite Exceptions

    theunknowknows
    theunknowknows
    Hello, I have 2 XG firewalls running V20 (latest) that are not allowing the connection despite being added directly as exceptions below. s3.wasabisys.com ^([A-Za-z0-9.-]*\.)?wasabisys\.com/ ^([A-Za-z0-9.-]*\.)?s3\.wasabisys\.com/ And s3.us-east-1…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Configuration - FiberONE ISP

    Hirkani Meral
    Hirkani Meral
    Hi All, I have a Internet Link from FiberOne ISP. I used a media converter to convert the Fiber link to Rj45. Then I plugged it into a ASUS DSL Modem/Router to use Wifi. in this situation, I got IP Address A, and I have the internet. But, I have a lot…
    • 8 months ago
    • Sophos Firewall
    • German Forum
  • SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795

    Manoj Pathak
    Manoj Pathak
    in recent scanning, we received "SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795)" vulnerability on port 22. just use this command in nmap "nmap -sV -p 22 --script ssh2-enum-algos 192.168.xxx.xxx" if it shows "chacha20-poly1305@openssh.com…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • HTTP Download über SSL-VPN

    Gerald Gleissner1
    Gerald Gleissner1
    Ich habe da ein kleines Problem. Habe eine SSL-VPN Verbindung zu einer XGS Firewall (SFOS 20.0.0.222) die auch wunderbar funktioniert. Allerdings wenn ich von ein paar älteren Netgear Switchen (zum Beispiel GS752TPP) mir die Konfiguration, also ein…
    • 8 months ago
    • Sophos Firewall
    • German Forum
  • Sophos XG Bug: Cannot send Backups using Amazon SES

    Rhys Goodwin
    Rhys Goodwin
    Hi Folks, Sophos XG appears to have a bug where it doesn't interact with some SMTP servers properly. In this case Amazon SES (Simple Email Services) cannot be used with Sophos XG for sending Backups. Other notifications work fine but backups generate…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Only allow certain devices to use backup ISP when primary ISP is down

    shred
    shred
    I have a primary and backup ISP, with the backup ISP being a cellular-based limited bandwidth plan. The purpose of the backup ISP is for my “critical” devices such as my home server which hosts my alarm system via Home Assistant (so I can still receive…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Client internet interruptions every 15 minutes

    despich
    despich
    Our environment is Dell Windows 11 workstations "Clients" connected to Cisco 3850 switches that all go out through the internet via our Sophos SF01V (SFOS 20.0.0 GA-Build222) firewall. DHCP and DNS done with local Windows servers. We have about 140 Clients…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • SFOS 20.0.0 GA-Build222 - Schedule for 2nd WAN PPPoE port not working

    techno.kid
    techno.kid
    Hi everyone, I can confirm that (to me :-) there seems to be a bug if you have more than one WAN interface with PPPoE: The " Schedule time for reconnect" under "Network" -> "Interface" -> WAN-Port will not be respected though it will show correctly…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • New install boot failure - black screen v.20.0.0.222

    Dan Muloney
    Dan Muloney
    Hi, I'm new to the Sophos Firewall, but not firewall products in general. I've been running pfsense/opnsense for years, and thought I might give it a try. I can get it to boot just fine in a Proxmox VM, but on dedicated hardware it seems to be problematic…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • SNAT over ipsec not working XGS2100

    Akshay Hegde
    Akshay Hegde
    I am referring this post with similar issue DNS request to DNS over Site2Site VPN I have below setup XG310 -- branch office XG430 -HA -- Head office Now I got XGS2100 - 2nd branch office ( Gateway local ip: 172.16.1.100 ) XGS2100 …
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Internet stop every day on same time on Sophos XG135

    Tihomir Trifonov
    Tihomir Trifonov
    Hello, we have a problem with our client where we put Sophos XG135 with latest update 20.0.0 on their network, like every day at the same time somewhere around 12:30-1pm and in the evening around 7-8pm, the internet stops but Sophos continues to work…
    • 9 months ago
    • Sophos Firewall
    • Discussions
<>