Hello everyone, I just wanted to ask out of curiosity what DNSBL/RBL lists you use. I looked at a few providers and after researching them I found the following to be good: Spamhaus zen.spamhaus.org Blocklist.de mail.bl.blocklist.de all.bl.blocklist…

Hi all! I have just logged into my Sophos XG (Version SFOS 20.0.2 MR-2-Build378) and saw that the Anti-Spam Service was randomly stopped. I do not stop the service, I checked the SASI-Logfile if there was some sort of crash, but apparently it seems…

Forgive me but I forgot if this is even possible with the XG 330. I am trying to enforce Google Safe Search via DNS with Web Proxy Filtering turned OFF because its blocking a Desktop web app's connection and I have no clue how to fix it other than turning…

Hi folks, Before the upgrade the gmail account used user name and password, after the upgrade the username and password were disabled and oauth 2.0 was the approved security method. Today I upgraded my iPhone and iPad to the latest version of IoS…

Hi, I have set up email scanning according to this guide: https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailConfigurePOPIMAPScan/index.html#add-a-firewall-rule I have found that…

Hi, using a Sophos XGS unit and trying to send a multifunction copier scan to email function to users. We have the XGS setup as an MTA for email purposes. We have the IP Address of our copier set as an allowed relay. We have a policy exception for that…

Hallo zusammen, derzeit verwende ich die Sophos XG im Homelab und bin daran die Einrichtung vollständig abzuschließen. Dabei trat folgendes Problem auf, dass ich noch nicht lösen konnte: Instagram aktualisiert sich nicht beim Öffnen der App. Aktualisiert…

HI, we have our firewall configured as transparent emial proxy. All works well, except the following: We can receive all mails from a domain @example.com except for user1@example.com and user2@exacmple.com All other mails from @example.com are delivered…

Hello guys our client has XG230 He says that emails for internal communication have to work even when there is no internet. Kindly guide me on how to do it in sophos.

Hi, we have added a web server behind the WAF in DMZ zone. LAN/WAN- we can access the web server through a public IP address. we have a backup server in the LAN zone. How to do backup Lan to Dmz zone using public IP or private IP of server…

I am trying to access the website https://uae.tweb.ttfuel.com/v2/ . Its accessible outside the office network. But its not accessible inside the network. Its saying site can't be reached. I am using Sophos xg firewall and I am new to Sophos. I think firewall…

Hi, I want to know how to scan the email attachments and get report of word, excel, pdf files shared by users on email. Can we also see the contents of the file ? we are using XGS136.

Hey, Ich bin noch komplett neu in der ganzen Sophos Thematik also bitte Nachsicht. Mein aktueller Aufbau ist wie folgt: Fritzbox --- Sophos Home FW(neuste Version) --- DMZ( Webserver auf VM auf Proxmox) Bis jetzt hatte ich den 0815 Aufbau mit einem…

Dear Support Team, Dear Support Team, I have Sophos Firewall XG330 (SFOS 20.0.0 GA-Build222) The Web policy is not working. when i blocked the https then all site all blocked. i checked the policy tester. its web policy is working. But when we open…

I’ve noticed that some sites subjected to TLS inspection still present valid certificates from reputable CAs without generating on-the-fly appliance certificates. This behavior seems unusual because, typically, I would expect the appliance to generate…

We have a learning website, that we want to allow YouTube access to. The website contains YouTube videos that we want to allow. But on the YouTube website we want to block YouTube access. Currently YouTube is being blocked with Application filtering.…

Hello everybody, I created a rule to prohibit the social network Facebook in Web then Policy, I applied it to a Host, I created a new firewall rule where I applied this, then activated.the rule does not work and facebook still works. How to make the…

Hi anyone can help me,currently i have implement WAF to my mailserver that have activesync,for now the waf rules listener port are 443 but how to allow any services like smtp/smtps/imap/ or pop3.im facing issue with slow login and cannot sent email out…

Hi, I would like to block inbound emails by email domain extension in my SOPHOS FIREWALL, for example: .ru .cn Now i'm blocking by the complete domain (*@domain.extension), but i would like to block by domain extension. Thanks Nuno Mo…

Good Day, As I only found old posts about this subject, here is the question still at hand: Is changing the language of the Quarantine Digest Report Email a thing yet or not? (Or even better - Writing your own) This has been requested a few…

Dear All i have this problem in pic i tried to close category (travel ) but as an execption i opened this site called (Tripadvisor) it opened but this is always the view ??? can u help me please ?? i hae to open the travel category to open normally…

We noticed that Microsoft Office was not updating, so we added the Microsoft Office exceptions as per Sophos Firewall: Configure web exceptions for Office 365. Next, we encountered an issue where Google Chrome wouldn't install, so we added the exceptions…

how can i block dawnload portable application?????

I have enabled SSL/TLS inspection to do MITM for HTTPS(443) trafic from LAN to WAN. I have push by GPO certificat CA to windows computer. That work just fine for most site. Now I have an issue with site that have HSTS enabled. For those site that enable…

Hi Community Members, I hope this message finds you well. I am currently exploring the best practices for protecting web servers, particularly in scenarios where the firewall is not acting as the gateway, The XGS also acting a reversed Proxy.. Your…