• How to create a scheduled CSV report from XG125 FW?

    Comfortably Numb
    Comfortably Numb
    Dear all, Just having a problem creating a scheduled compliance report on my XG125 in a CSV format via email, Steps taken are as follows: Reports > Compliance > 'Show events' > 'System Events' in the table presented I filter by contains 'DHCP Server…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Remote access VPN IPsec - Gateway/Address in SCX/Provisioning file

    Jeff Yankowski
    Jeff Yankowski
    Currently when you export the SCX file (or use a provisioning/pro file to automatically update the VPN configuration in the Sophos Connect client) the file's "gateway" parameter has the WAN IP of the Sophos XG firewall. Our firewall is currently behind…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • XGS - Show reason why mail is quarantined

    marcus33241
    marcus33241
    We get notify mails from our customer XGS 116 with SFOS 20 that mails are quarantined due to a detected virus (Malware 'Troj/MSIL-SSP,CXmail/MalPE-BP' detected and blocked) When looking at the device, I can't see any hint at the dashboard that a mail…
    • Answered
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • Make specific URL with parameters available to the public and simplify it

    Thomas Schachtner
    Thomas Schachtner
    Hi there, we have an internal URL (like server1/.../access.php This link is designed to be accessed directly from the Internet and we would like to make it available to the public. But as this link is quite complicated and as it might reveal details…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • Controlled Zero Touch GA?

    FFin
    FFin
    As "Controlled Zero Touch" (=real Zero Touch) is available in Early Access since SFOS 19 MR1 (mid 2022) - is there an ETA for this feature to go live for everyone? Meanwhile all new appliances being shipped should have at least 19 MR1 preinstalled,…
    • Answered
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • SNMP acces to spesific ip adreses

    Ozan Can
    Ozan Can
    Hi; I want to do monitoring from snmp service but I don't want to open snmp service to the all world , I only want to allow snmp to the specific ip adress. for this process; I am going to system -> administration -> snmp and activated the snmp service…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • hen the VPN is connected with firewall just the local application/network should be accessible.

    naveen User
    naveen User
    SSL VPN is used as full tunnel and the requirement is when the VPN is connected with firewall just the local application/network should be accessible. Checked the configuration and it was proper NO VPN to WAN rule was present hence the WAN traffic…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • IKEv2

    AdminJH AdminJH
    AdminJH AdminJH
    When will IKEv2 for Remote Access VPN be available?
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Support for DNS over HTTPS

    tscott_16
    tscott_16
    When forwarding DNS to servers like 1.1.1.1 or 8.8.8.8, is it possible to do so using DoH?
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos SFOS WAF Rules limit

    admin_idl
    admin_idl
    Hello, We use the Web Server Protection of Sophos XG Firewall and have now reached almost 60 WAF rules. This is also the maximum number of WAF rules. Is it possible to combine several URLs in one WAF rule and route them to different servers? WAF rule…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Check weblinks in e-mails

    Technik Technik1
    Technik Technik1
    Hello everyone, I have the following question. We have a customer with an XGS 3100 with version 19.5.3. The Sophos serves as a mail gateway/relay and is connected to Sandstorm. Now the question was whether Sophos can also check web links within incoming…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Management Port and Control Centre Status

    haydenspence
    haydenspence
    Hi. Does anyone know if it's possible to exclude configured network interfaces from the coloured interface status icon on the home page of the firewall? Its purpose is to show at a glance of connectivity problems. However, sometimes it is normal for an…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos Central - logs FW

    Gustavo Moreira
    Gustavo Moreira
    Dears, good morning, We are setting up a SIEM in the cloud and I am using the SOPHOS API to share the tool's logs. I have already configured API profiles such as reading and forensics and have not been successful. I have already made all the necessary…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Can't I delete or rename the "admin" account that accesses the Sophos firewall?

    hyun jin
    hyun jin
    Due to the company's internal security policy, the account named admin cannot be used, so the name must be changed. Can't I delete or rename the "admin" account that accesses the Sophos firewall?
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • two connections to the same Sophos in the Sophos VPN Client?

    Tobias Schubert1
    Tobias Schubert1
    Hello, Is there a way to import two connections to the same Sophos in the Sophos VPN Client? The normal VPN User are Domain Users. I have also set up a local user on Sophos in case of an emergency - a failure of the domain server. I would like to…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • 1:1 SNAT Nat possible with Sophos XG

    miki1980
    miki1980
    Hi, we migrated our SG to an XGS. After this we have the problem that we can not migrate this 1:1 NAT map source rules: www.sult.eu/.../ We use this rules to forware a IPSEC VPN remote network to an XGS headquarter firewall transfer network and from this…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • WAF & large files – how do you deal with it?

    dirkkotte
    dirkkotte
    Hi all, When AV or other protection features are enabled, we keep running into various problems while uploading large files. Sometimes the disk space (Temp=100%) seems to be the cause, sometimes other internal buffers. We have the requirement to allow…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Using Application Filtering Lists for Web Policys

    Quallensaft
    Quallensaft
    Hallo @all, regarding https://community.sophos.com/sophos-xg-firewall/b/blog/posts/generative-ai-policy-enforcement-with-sophos-firewall is there any way to use the new application category for the web policys? Application filtering only allowing allow…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • List of device in my lan

    Manuele Orlandi
    Manuele Orlandi
    Hi all, there is a way to see list of my device, their traffic, their navigation, their hostname, etc? Non only dhcp clinet, even who has a static ip.
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Generate Custom Reports using API

    cm00001
    cm00001
    Hello, How can I generate a custom report (like the one below) as a CSV (or any other structured data format) through the Firewall's API? (I would use the "Schedule" option to send this as an email attachment if it wasn't because only 50 max records…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Managing Data Volume or Gateway Speed on XGS and Sending Email Notifications

    Reza Jami1
    Reza Jami1
    Hello everyone, One of my clients has an XGS Firewall, and their gateway is an LTE router with a SIM card that provides 80 GB of data volume per month. When the data volume is exhausted, the client experiences poor internet speed, making work difficult…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Two IKE VPN configurations on one firewall

    Niklas R
    Niklas R
    Good day together I normally look after Zyxel firewalls, but I was now allowed to take over a Sophos customer from a former colleague. I would like to switch this customer from IKEv1 to IKEv2, but I don't want to make a hard switch. So that the customer…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Security policy for hosts

    Gustavo Moreira
    Gustavo Moreira
    Is there any way to create a policy so hosts that are not in compliance cannot access the internal network? Example: If the host does not have AV and CrowdStrike installed and active, access to the internal network or VPN is not allowed, therefore,…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos Connect - Autoconnect - MFA - Remote Users

    Andrew Bryson
    Andrew Bryson
    We have autoconnect enabled for users, and used to have MFA (Sophos) enabled. We had to disable MFA as it was causing grief for remote users with flakey Internet (and no other ISP options available). Internet connections would go down for a few seconds…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • XGS4500 SFOS19.5.3 Quarantine Report Only shows last days worth

    Yogi_Bear_79
    Yogi_Bear_79
    XGS4500 (SFOS 19.5.3 MR-3-Build652) The quarantine report appears to only show what has been received since the last report was sent. The subject line: Quarantine Digest (1 emails quarantined from 10 May 22 00:15 to 09 Sep 23 09:00) and the header state…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>