This issue just started on Sunday, reoccurred just now. Remote VPN login times-out. I've narrowed it down to an issue with the FW connecting to AD. The "Test Connection" failed. A reboot of the FW fixes the issue (Both times). After reboot, the "Test…

I'm trying to setup a Central managed AP to a VLAN connected SSID to my Firewall. Pos A - If I'm connected directly to the Firewall with the AP, the AP can see and serve the internet to anyone connected to it. Pos B - If I'm connected through a…

Hey, on our fresh deployed XGS3300 with SFOS v21 the Reports Widget still shows 0 on all values: But you can see all information in the detailed view when click on one of the line. Is there a way to reset the view, or do i have to restart the complete…

Schönen guten Tag zusammen, hier habe ich eine Frage die mich grade brennend interessiert. Ich habe zum Beispiel in der Sophos unter Netzwerk -> DNS 8.8.8.8 und 8.8.4.4 eingetragen. Weiter hat die Sophos 3 Internet Anschlüsse. Für jede Internetverbindung…

Hi, im new in sophos firewall, we have office 365 user and what i want is when they will connect to our vpn they will use there office 365 username and password, for authentication. example sophos client or opnvpn connect

Hallo, Ich habe eine Firewall mit mehreren Schnittstellen, über die Anfragen verarbeitet werden. Eine Subdomain ist auf eine bestimmte Schnittstelle geroutet, und Anfragen auf dieser Schnittstelle werden an einen Server in einer DMZ weitergeleitet.…

Hello, we have an question because in the past we have problems with DNAT when configuring our two WAN-links as active/passive. As a workaround we configured the two interfaces as active/active, but now the problem is the second link (which is limited…

I'm a pulling my hair trying to figure out why our SSL VPN users all of a sudden cannot access the network resources. For the most part I moved 99% of our users over to IPsec VPN setups but in some cases, like accessing from China, IPsec does not allow…

Hi, I cannot find instructions on how, if possible at all, create Site2Site VPN tunnel, from Sophos XGS outbount to OpenVPN server. This is for IP phone service, I created one LAN port for local phones, MASQ via WAN interface....and now I nned to create…

Hello community, We want to fetch a list of IP addresses from a webserver and (dynamically) import them into a host group on our firewall (Sophos XGS3100 Vers. SFOS 20.0.2 MR-2-Build378 ). Our plan is to use the API along with a Python script that downloads…

Hello, on our Sophos XGS 126 with SFOS 20.0.2 MR-2-Build378 we have the problem that all quarantine digests get stuck in the mail queue. All other mails are delivered without any problems. In SMTP logs I can find: R=router_for_notifications…

Hello, I have a previous Sophos device that was copyrighted, but now when I reinstall it, I get an error that I cannot access the web because the device serial is not recognized, and the old id.sophos management website cannot be accessed because I switched…

Hallo Zusammen, ich würde gerne bei mir folgendes bauen: Nur bestimmte Nutzer aus einem Ausland sollen per VPN eine SSL/IPsec Verbindung zu meinem lokalen Netzwerk aufbauen. Leider konnte ich bis jetzt mit einer Countryblocker-Firewallregel…

on a sophos firewall (e.g. xgs136) I can view the interface statistics via the CLI. (command: show network interfaces) At the output I notice that there are many dropped packets at RX state (receive).(LAN Interface) Port1 Zonetype:LAN MAC Address…

When I import the url files in existing url categories, we're facing the below issue.

Guten Morgen zusammen! Bei meinen größeren Kunden habe ich eine Wartungs-VM. Von da aus komme ich in der Regel an die Sophos Firewalls der jeweiligen Standorte intern über eine Site-to-Site VPN. Das hat bis her auch wunderbar geklappt, wenn ich die…

Hello, We are currently adding authentication via a Radius server on the firewall. Unfortunately, we always get the following message when testing. Does this mean that the username and password are wrong or is it due to the settings that are being checked…

I want to configure my Sophos Firewall so that only Firefox can access the internet from a PC, and all traffic must go through the Sophos explicit web proxy (configured on port 3128). Direct HTTP/HTTPS traffic from the PC should be blocked entirely. …

The SSL VPN client is not connecting immediately after installation and returns the error below We have just uninstalled the previous version of SSL client and re-installed the above. The last time a colleague installed a fresh OS on their machine, the…

Hello, We want to add a Radius Server on the XGS. Which entry must be stored for the item ‘Groupe Name Attribute’? Where can I find this attribute on the Radius Server? Thank You!

Exactly the same question as the thread here RE: Does Sophos support Intel i226-V 2.5G? Except I would like to know then this support will be introduced as these nics have been out forever and linux kernel fully supports now as well.

Hey, after deploying our new XGS3300 with SFOS v21 we noticed several IPS Alerts which are created from a Veeam Guest Interaction Proxy to the Veeam Backup Server: Attack : FILE-OTHER Adobe Premier Pro ibfs32.dll dll-load exploit attempt Attacker: Guest…

Hello, I have a problem with mainly HTTPS connections showing up in the log as Invalid Traffic / Invalid TCP state. See screenshots below. example domain is https://telekom.de I have 2 Internet connections with separate NAT and SD-WAN routes. Routing…

Good day l have create a site to site to vpn , the vpn is up , but we cannot ping the branch site On the head office there is ospf configured, and if we trace route from the firewall it's showing that the traffic is going through the ospf vpn of…