Hello, I'm new in Sophos. I need to install back a previously removed (2 years ago) XG106. The active FW (#2) was v17.5.13 MR13 The other FW (#1) was v15.5.12 MR12. I've upgraded this one (FW #1) in v18.0.6 MR6 without problem, and was able to boot…

Hey, since we upgraded from SFOS 18.5.4 to 19.0.1 we can no longer see the source IP a SSL VPN user connected from in the VPN logs. It simply shows nothing or the LAN IP Address of the Firewall in the SSL VPN IP-Range. We only see the real source…

Hi, I have configured DNAT rules to our internal web server according to the documentation https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/NATRules/RulesPoliciesCreateDNATAndFirewallRulesForInternalServers…

Hello Community, We have XG330 at HO (Previously working on 18.5.3 - recently ipgraded to SFOS 19.0.1 MR-1-Build365 ) and a mix of XG106 and XGS107 at locations with SFOS 19.0.1 MR-1-Build365 We had configured IPSec Tunnel with BGP over RBVPN…

Did set up an Active Passive cluster today. Named my second FW TEAHOMEFW02. When I log-in to the primary device the following is shown However when I login from the auxiliary device it shows the same. This will make it more difficult to see on…

SSL VPN ISSUE Version - SFOS 19.0.1 MR-1-Build365 VPN is connected but Issue faced. 1 . SSL VPN Gateway Is reachable. 2 .Network that are in sophos Firewall are reachable (Port-1 -- 192.168.100.1/24 -- Server = 192.168.100.10/24) Interface IP address…

Hey there, My DHCP IP address from my carrier is 203.xx.xx.xx/16 but the gateway is in a different subnet 100.xx.xx.01.. wacky system, but not one I was really expecting.. The issue I'm running in to is that I'm trying to establish a backup IPSec…

Dear Friends, We have recently upgrade our Firewall XG310 to latest Firmware ( SFOS 19.0.1 MR-1-Build365) , now we are facing issue in IPS Time of signature update which shows 23:08:29, Nov 11 2022 and the Pattern Updates for IPS and Application signatures…

Hi! I´m facing an issue that I could not resolve. I have and XG330 with SFOS 19.0.1 MR-1-Build365. I use the firewall as a web proxy. Microsoft domain services enviroment. It´s weird that it´s working any webpage without any problem and suddenly…

Hi and sorry for my poor english, I'm triying to use the PHP script provide from user burton, but the scrip say this: CREATING TEMP CERT... <?xml version="1.0" encoding="UTF-8"?> <Response APIVersion="1800.1" IPS_CAT_VER="0"> <Login> <status>Authentication…

Hello, I am trying to set up IMAPs/POPs/SMTPs Settings in an XGS running SFOS 19.0.1 In general there is an external Mail Server and in the local network behind the XGS there are Outlook Clients that connect to the Mailserver via IMAP 993 and SMTP…

Hello, I've installed SFOS 19.0.1 MR-1-Build365 in my environment I have 3 interfaces - WAN, LAN and DMZ and selected ICMP enabled for both LAN and DMZ interfaces in Administration -> Device access tab In each zone i have installed test host which…

Es stellt sich aber heraus, dass die E-Mails ohne Signatur abgegeben werden. Ich nehme an, dass bei jeder Domain ein eigener Eintrag in der XG bei "DKIM SIGNING" angelegt werden muss. Als Beispiel nehmen wir hier im Forum "name@domain.tld", woraus…

Hallo, wir hatten einen User der kompromittiert wurde und Spam verschickte. Jetzt ist die Warteschlange voll mit 19000 Mails. Wie bekomme ich diese gelöscht? Ich habe ein Ticket aufgemacht, aber nachdem der Techniker fast 2 Stunden nicht annähernd…

Hello - I was just on the phone with a Sophos tech troubleshooting our site to site IPSec tunnel from a remote site to the main site. Its been working fine for years, up until the last week or so, where some traffic seems to go in the tunnel but never…

Good Morning professionals, Please i need a suggestion for a Sophos reputable partners in Nigeria. i want to renew my license. Secondly I'm having issues picking firmware update i couldn't install the update please i need assistance on how to go about…

I wanted to use that wireless option Override wireless networks’ passphrase for a WiFi. Unfortunately it does not work like intended. When you set it, the PSK changes (only for a SSID with type separate zone ) but you also need to enter the same PSK…

Hi .. Just wanted to list the steps I performed to finally validate LE Cert on XG 19.0.1 MR-1-Build365. I spent over a month trying to narrow down the issue and I might have read every article in this forum with no avail. I hope this helps. The steps…

XG firmware: SFOS 19.0.1 MR-1-Build365 Hello, Internet access in the SSL VPN full tunnel breaks off after about 15 minutes during use. Only the firewall management page can be accessed. Internal servers or IPs cannot be reached! Nothing can be seen…

Hi all, I have two site (HQ & Bo) with vpn ipsec link HQ: XG330 (SFOS 18.5.4 MR-4-Build418 BO: XG86w (SFOS 19.0.1 MR-1-Build365) Until yesterday, everythings works well. Then I noticed the problem of the vpn connection I check all configs, no…

My setup has 2 VLANs - Main and IoT, using Sophos XG as DHCP and gateway. I'm able to allow traffic between the 2 VLANs by adding a firewall rule of LAN Any host Any service to LAN Any host Any service. What I'm trying to do is to only allow traffic…

Got a notification that my config disk usage reached 80%. Any idea on how to purge or shrink the size? Currently on: 19.0.1 MR-1-Build365 Message: Config disk Usage reached 80% exceeding the threshold of 80%

XG firmware: SFOS 19.0.1 MR-1-Build365 Users running the legacy SSL VPN client are seemingly ok. This is only affecting 2 users using Sophos Connect. The VPN doesn't show as disconnected to the end user but I can see termination entries in the SSL…

Hello, I have XGS2300 running (SFOS 19.0.1 MR-1-Build365). I have a question about the provisioning file and imported connections. Whenever I run the provisioning file I always get IPsec remote access connection imported even though my group isn't in…

We have a Sophos XG 310 , firmware v19.0.1 , The firewall is blocking emails, with web filtering, we have not configured any policy to block emails, Instead we configured a policy to allow outlook.com , office 365. but if we put web filtering on the firewall…