Hallo zusammen, wir setzen seit der V21 vermehrt Lets Encrypt Zertifikate auf unseren WAF Regeln ein. Hierbei ist uns aufgefallen, dass danach einige Dienste nicht mehr ordendlich verbinden können. Prüfen wir hier die entsprechenden Logs, stellen wir…

Hallo zusammen, nachdem ich das Problem mit den Zertifkiaten in folgendem Thread gelöst habe, Sophos XG Lets Encrypt Zertifikat stehe ich jetzt vor dem Problem die WAF ein zu richten. Hier mal die Konfig wie es bei mir im Netz aussieht: Router…

Dear all, I have Installed the Sophos SFOS 21 on a VM on Hyper V, and I am facing Issues with the WAF. I have a internal WebServer where you can gain access over Port 8080, I want to know if it is possible to access the WEB-Server over Public…

Hi i want to ask the configuration of (WAF) regarding customer request to enable an additional port, specifically port 11883.HTTPS is currently enabled and functioning without issues. To accommodate the client’s request for port 11883, I have created…

Many of us are using Cloudflare or similar services to protected their Extranet / Webmail and other public websites using the Sophos WAF. It's possible to display the real IP addresses on any Linux servers behind the firewall by enabling Pass host header…

Hi, we have added a web server behind the WAF in DMZ zone. LAN/WAN- we can access the web server through a public IP address. we have a backup server in the LAN zone. How to do backup Lan to Dmz zone using public IP or private IP of server…

Hi anyone can help me,currently i have implement WAF to my mailserver that have activesync,for now the waf rules listener port are 443 but how to allow any services like smtp/smtps/imap/ or pop3.im facing issue with slow login and cannot sent email out…

Hi Community Members, I hope this message finds you well. I am currently exploring the best practices for protecting web servers, particularly in scenarios where the firewall is not acting as the gateway, The XGS also acting a reversed Proxy.. Your…

Hallo Zusammen, wir haben seit der Umstellung von DNAT auf WAF leider ein Problem mit der korrekten Darstellung von z. B. OWA. Hier werden statt dem "down arrow icon" oder div. Funktions-Icons die Symbole durch ein î oder § ersetz. Ich habe mich…

Hi All, Sorry if this has been asked previously, I have combed through the forums and could not find a solution or direct discussion to this specific issue I am facing. We have signed up for the Sophos XG Firewall via the Azure marketplace image. I am…

Hallo zusammen; ich habe ein Problem bei dem sich der Sophos-Support leider auch die Zähne aus beißt. Gegeben ist ein OneAccess-Router von O2 auf den nur O2 Zugriff hat, eine XGS116 und ein APX320. Intern steht unter anderem ein MS Exchange Server…

When I go to edit the certificate and upload the certificate which is due for renewal ( every 13 months ), it fails with the following error at the top center of the screen: Certificate could not be updated as it is already used by HTTP Based Policy…

As with our current Sophos XGS Firewall Rules and Policies configurations, the Citrix Netscaler 2FA authentication is working. We started planning of using the Sophos XG Firewall Web Server Protection. The license required were purchased and registered…

Hi everyone, I am trying to find out if I can use the WAF rules to stop certain HTTP methods for connections to one of our web servers. I would like to try to only allow GET and POST and deny any of the others such as "DEBUG", "CONNECT", "PUT", "UPDATE…

Hallo alle zusammen, ich habe seit einiger Zeit Probleme mit meiner XG210 und dem Versand von E-Mails bei mobilen Endgeräten. Im einzelnen geht es darum das wir E-Mails über mobile Endgeräte (Android, Apple) Empfangen und Versenden können aber sobald…

Hello, need help for configurate Sophos XGS to protect Exchange OWA from brute force. S erver is behind DNAT

Dear Friends: I’ve been following this article because none of my reports were working. Sophos Firewall: No reports show After flushing the reports, it appears as though I never completed the configuration of my WAF certificates. So, I decided…

WAF rule not working for a website that hosted on internal IP in windows server 2012

With reference to below doc https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/WebServer/AuthenticationTemplates/index.html Is there any variable available to get client ip address? Example "client_ip…

Hello, we have also this problem and cannot send larger emails from mobile phones throuth our XG135 firewall. (ActiveSync) What are the steps to fix this problem? (1MB Limit) Thank you

Seit zwei Tagen erscheinen keine Einträge mehr im WAF Log auf der Browseroberfläche. Es wurde nichts an der Firewall geändert. Durch einen Hinweis in diesem Thread WAF not starting after reboot due to config error habe ich nun die Protection Policy deaktiviert…

Hello Sophos Community, We are migrating from a UTM 9 unit to a new Sophos Firewall unit and I've setup a WAF rule for two internal web servers. When setting up the firewall rule, I chose the Action dropdown option of "Protect with web server protection…

Hi all, I'm looking for a bit of hand holding and guidance here. What I am trying to do is allow access to internal containers hosting multiple websites and applications. I have a fresh Sophos Setup with no special custom rules or anything yet. I have…

Gday Needed to forward 25 ports to a webserver using WAF. I can't for the life of me work out how to enter in more than one port to either. Surely I don't need to create 25 webserver and 25 WAF rules? Anyone done this before?

Servus zusammen, leider ärgert mich die Webserver Protection der XGS gerade und ich finde den Fehler Partout nicht. Die Webserver sind soweit passend konfiguriert. Wenn ich die Firewall Regel (Protect with webserver protection) anlege, und dort als…