Hi, We currently have an issue where e-mails from trusted sources. The issue is a changing domain name and mailbox name for example mailbox@em2058.uk.selfemployed.intuit.com where the number after em changes. We are able to add a wildcard exception…

SG210 Current firmware version:9.715-4 Your firmware is up to date. Current pattern version:228087 Your patterns are up to date Hi, we got a emails coming through that are SPAM starting 11PM EST 07/11/2023 and we see a continuing trickle still passing…

Hi all, I use Email Protection in a simple way. This is my SMTP relay only. However, the sending is done via scripts. The scripts generate a large number of connections, therefore the logs contain messages of saturation of set liits. 2023:06:09…

Hi everyone, a customer told us today to add some custom RBLs at his UTM, because he is getting a lot of spam and the "recommended RBLs" are not enough for him. So I added four RLBs today: zen.spamhaus.org psbl.surriel.com sbl-xbl.spamhaus…

Hi Community, I want to bring up this topic as I did not find helpful informations. I did read about the change to SASI spam filter but there was no real feedback about user reporting less anti spam performance. Overall myself and the other users did…

Hello, we had setup "Web Filtering" on our SG210 and are using the "Proxy Auto Configuration". For testing i browse to a forbidden website. Firefox and Edge are blocking the content correctly. But Chrome does not. Proxy settings are rolled out…

Moin, hatte heute ein Phänomen, welches mein Vertrauen in die Email Protection der UTM und in Sandstorm sehr stark schwinden lässt. Zwei Mails mit einem Anhang im HTML Format kamen durch die Firewall durch. Wäre soweit ok, wenn das nicht Downloader…

Hello, We have blocked single ip addresses and also ip ranges (SMTP Network Blacklist). However we noticed that spam messages still getting through or being quarantined. Those Phishing messages are usually sent from the ip network clodoserver.ru or…

Hi folks, just noticied while scrolling thru the mail log, that a warning is thrown that no ldap bind was possible. However, when adding and checking the authentication server all is fine and auth on 636 looking good. Reverting to port 389 and the…

Hello Community. Sophos XG Firewall Firmware Version 18.5.3. We have too many of False Positive, and false negatives. The quality of Spam filtering is very poor. It is letting too many stupid emails go through. Checking the Logs, there are random…

Hi, no, this is not a typo. We just received multiple CEO Fraud attempts with our main xyz.de domain spoofed as xyz.dee! Xyz.dee ist not even a real tld: https://data.iana.org/TLD/tlds-alpha-by-domain.txt How (tf) can this mail pass the UTM mail…

How can I whitelist the Weekly Executive Report? We added multiple Expressions to the Expression Filter. Expressions are blocked just fine. However the Expression also shows up on the Weekly Executive Report. Thus, Sophos UTM scans those messages as well…

Hallo, auf einem UTM-Cluster (v9.708-6) habe ich unter "Email Protection" ==> "SMTP" ==> "Advanced" ==> "TLS Settings" das Zertifikat (Commodo) hinterlegt und "TLS version" auf 1.2 gesetzt. Funktioniert alles ganz normal, E-Mails werden TLS-verschlüsselt…

Hi, i have many spams on my utm and it goes through the utm. I don't know if the rbl check is working proparly. is there a possiblity to check this? And i know the question is often written, but what are the best RBLs for dyn-dns-email-server? Yeah…

Hi I have configured email protection on Sophos UTM and I want to connect the email account to Microsoft Outlook. When I make the pop settings on Microsoft Outlook, it gives a password error and the Sophos side log is as follows: pop3proxy[20426]…

Hi, We have our email servers hosted internally, so a recommendation to stop email spoofing is to reject any external incoming email with our email domain as a sender. So I setup an antispam sender blacklist blocking all emails supposedly from our domain…

Sophos UTM 9 Version 9.705-3 We had yesterday an Phishing Mail attack with pishing mails, that were sent from a fake address with our own domain. They were sent from random hosting servers and were not blocked by the SPF check. Even though this…

I want to be able to use a regular expression to block spam we get. The problem I have is that the spammer is using a UTF-8 base 64 encoding method in the Subject area and From area. The emails seem to slip by because the subject and from is utf-8. …

I have Sophos UTM 9.7 scanning my emails using Oultook client but whenever I start outlook it complains about the self signed certificate. If I view the certificate it does allow me to install it and I said yes but that doesn't fix the problem …

Hallo zusammmen, bei einer UTM SG-125 Firmware 9.705-3 kann man keine PGP Keys hochladen.Es erscheint immer die Meldung: "Benutzerobjekt für E-Mail-Verschlüsselung kann nicht erstellt werden: ungültiger Schlüssel oder Kennwort erforderlich." Es…

Where does the UTM document whether it successfully validated SPF records? and with which IP and or Domain it was validated? I have to investigate a phishing campaign and i have access to the email itself as well as the smtp log file. In neither of…

Hi, Is there a way to clear all email in mail spool? I have 2M spooled email almost all coming from 1 sender. or is there a way to clear only those email coming from that account? TIA

Hallo zusammen. Das ist mein erster Login hier, ich möchte gerne alle grüssen die sich hier so tummeln um zu helfen oder um Hilfe zu suchen. Ich bedanke mich schon jetzt für all die Zeit und Energie die ihr alle aufwendet um einander und mir zu helfen…