• XG v18 captive portal appears after a few days with Match known users disabled

    Lewis Brand
    Lewis Brand
    Hello! Hoping someone has seen this before and has found a solution. I am running XG firewall home version SFOS 18.0.4 MR-4 on a home network. I have a basic LAN to WAN firewall rule with #Standard LAN Policy applied to it and Match known users unchecked…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • NET::ERR_CERT_AUTHORITY_INVALID

    Alex Santiago
    Alex Santiago
    Good morning, some images from the site are not showing. Could anyone help? Attached are some prints.
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Web Filtering remains active even when disabled

    Michael Traner
    Michael Traner
    Hello All, This is a repost of an unsolved problem from the Sophos subreddit ( www.reddit.com/.../) , so if it looks familiar that's why. I'm running Sophos XG SFOS 18.0.4 MR-4 and running into issues with web filtering. In short, the category "IP…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Web authentication for servers

    ecar13
    ecar13
    New XG deployment (SFOS 18.0.4). I created a few web policies so that we can control what websites authenticated users can go to. Seems to work fine. I have about a dozen servers (some linux but most Windows) that run Services. The services will run…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Block Line. Facebook and enable Skype

    tim huang
    tim huang
    Dear all, I would like to know how to block Line application It seems that data of Line application (Line for Windows) use port 80 & port 443, which is same as website. (Actually, we have blocked data transform after unable website function) How…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • IPSec between XG and SG - question about KB000036746 - really 128bit and MD5?

    LHerzog
    LHerzog
    Hi, I have a question about Sophos KB 000036746 I received this link from support in case 03251728 without any more information. Are the shown and red marked settings on XG policy really required in this way or is it just an example? I ask because…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Web Access to non-standard ports

    Andy C
    Andy C
    We have a new XG running as a direct Proxy I have 2 sites I cannot access and non standard ports e.g. https://x.x.x:5601 and https://x.x.x:8182 I get the generic "Hmmm… can't reach this page" from Edge. The ports are allowed in Web proxy configuration…
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Block sub URL XG Firewall

    Andy C
    Andy C
    I want to specifically block a sub URL https://app.powerbi.com/groups/me/getdata but nothing else under app.powerbi.com . I've done this by creating a Category and adding Domain/keyword as app.powerbi.com/groups/me/getdata If I go to https://app.powerbi…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • DPI SSL/TLS website alert

    lenyick
    lenyick
    I am just now switching over from using the web proxy to DPI engine and i am having one issue where the only site that wont load on IOS Devices is www.youtube.com getting (TLS handshake fatal alert: inappropriate fallback(86).) using safari browser…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Policy to allow Sophos Central - New firewall setup

    Brent Berry
    Brent Berry
    Hello, I am new to the Sophos world and have a new SX135W that I am working to get setup. We migrated policies from and older SG230 and now seem to have broken the connection to Sophos Central. I added a rule to permit any traffic to Sophos LiveCentral…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Wild Card Blocking/Filtering?

    yesandno
    yesandno
    Hi everyone, How and where do I enable wildcard blocking? I want to block all the stupid, ",io" TLD's among others. Something like this; https?://[A-Za-z0-9.-]*\.io/ just not sure where to put it. Thanks in advance!
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Creating a new Business Application Rule hangs the screen

    Brian Ladley
    Brian Ladley
    I need assistance with creating Business Application Rules for Exchange General and Exchange Autodiscover. I can create User/Network Rules without freezing the screen but when I choose the option for Business Application Rule, it gives the list to choose…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • How to block web radio

    Jelle
    Jelle
    I currently see a live connection running since early in the morning based on HTTP Resume Filetransfer. Investigating the destination IP address I found out it is web radio (http://94.130.253.194/). How can I block web radio? - I don't want to block…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Country block - Does it work on SFOS 17.1.2 MR-2

    itguy318
    itguy318
    I have created a firewall rule to block traffic from certain countries. I am on the latest XG version SFOS 17.1.2 MR-2 I followed the knowledge base article https://community.sophos.com/kb/en-us/123007 Are these settings and article valid. Thanks
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Add DNS to separate SSL VPN profile

    lara20
    lara20
    I have a SSL vpn profile (PROFILE 1) through which majority of my users login remotely if required to access the LAN For a small group of contractors i have created a separate SSL VPN profile (PROFILE 2), so they have access only to 1 resource (SERVER…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG Hyper-V VM as a filtering device

    Bill Lohrer
    Bill Lohrer
    I know this has been asked before, and I have read several posts about how to do it, but I am just not getting it to work. I have installed the Sophos XG Hyper-V appliance. I have another firewall product that is replacing my XG that I had installed…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • How to configure Sophos for Securing IoT devices?

    Deepak Verma
    Deepak Verma
    Hi, As Sophos does not have the option to configure policies based on device type so How will configure my IoT devices security? I have many devices which are connected to office LAN network but I don't want to give internet permission to some special…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • I can not access a device on another subnet

    Soporte_360
    Soporte_360
    Hello everyone. I recently implemented an XG125 in my office. In the sophos I have 2 vlans (vlan10 called LAN_Administración with ip 192.168.1.0/24 and vlan20 called LAN_Laboratorio with ip 192.168.0.0/24). On vlan10 I have some devices that I want to…
    • Answered
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Unable to view youtube videos via previews or links, but works on youtube.com

    tomrgsd
    tomrgsd
    Using SFOS 17.1.0 GA on XG 650. We have Safesearch enabled and if a user that is allowed goes to youtube, they can search and view videos as expected. When that same user and same computer tries to watch a video that may be embedded, redirected or even…
    • Answered
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Windows 10 Mail build in client and Google Music Manager ( windows 10 ) Solved....?!

    PaulThijs
    PaulThijs
    Hello to who might concern the following. The issue : build in windows 10 mail client not synchronizing when HTTPS Scan And Decrypt is active ( certificates are installed on the endpoints ). And Google Music Manager ( windows 10 ) not connecting to…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • How to Import Spamhaus DROP live IP list and block on firewall

    Deepak Verma
    Deepak Verma
    Hi, I want to block some WAN IPs (LAN to WAN & WAN to LAN) on the Sophos firewall but the issue is that this is a third party live list in text format ( myip.ms/.../latest_blacklist.txt). It will auto update. How will I import this txt list on the…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Security Configuration for Chrome OS

    Deepak Verma
    Deepak Verma
    Hi, We are planning for a big network (2500 Chrome OS Users) and I am asking a simple question about IPS configuration for the Chrome OS policies. There is no specific IPS signature for the Chrome OS in the XG firewall IPS (I didn't find on another…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Routing from WAN to LAN - Some help needed

    Jimmy Le man
    Jimmy Le man
    Hello everybody, I need some help here. I recently migrated from pfSense to Sophos XG home and I really like it, but I have some trouble getting my routing configured. Basically I want to configure remote access to my media servers. What I did is…
    • Answered
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Smtp enable on XG firewall

    sindbad
    sindbad
    Hi all, I want to enable SMTP on the XG firewall. I opened the service SMTP from LAN to WAN I did a telnet and it's still not open. Am I missing something? Would love to hear from you. Thank you Regards
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Traffic shaping for just 1 client

    itguy318
    itguy318
    We have an existing traffic shaping policy for all users on the network. Now i want to create an additional rule for just 1 client to minimize the bandwidth for that client. I have followed https://community.sophos.com/kb/en-us/123059 This new user…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
>