I have a Sophos UTM9 cluster where each firewall is connected to two different ISPs (let’s call them WAN1 for Provider A and WAN2 for Provider B). Let’s name the interfaces 1-2 (node 1) and 3-4 (node 2). I want that: 1) the traffic to failover from…

Hey everyone, i have a problem here which turns out to be my final boss. What am I planning to do? I run two Sophos UTM firewalls at home, a UTM 320 which manages the LAN and an SG115 which manages the WLAN. I switched to VLAN operation, before…

Hello Community, we use a Sophos UTM cluster consisting of two nodes running on Sophos UTM 9.718-5 This Cluster routes the traffic through specific vlans. We have strange behavior with windows server vms that are operated in vlans behind the sophos…

Hi I'm using Sophos UTM 9 Firewall and recently I've faced the following issue with site certificate which is (" Certificate is not valid") i tried this solution in this link but still it doesn't work https://support.sophos.com/support/s/article…

Hello everyone, Today I observed something interesting. We run two SG450 appliances in an HA cluster. An interface of a RED was incorrectly set to local eth0. When we wanted to transfer the interface from local eth0 to the remote RED, our master…

Hello All, I am reaching out because I require assistance with a particular issue. My aim is to install knowBe4 PAB (Phish Alert Button) for Outlook 2019, but I am encountering difficulties during the installation process. Each time I attempt to install…

Hello, I have multiple messages in Advanced Tread Protection. 2023:06:22-03:43:37 xxx ulogd[13536]: id="2022" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped (ATP)" action="drop" fwrule="63001" initf="eth0" threatname="C2/Generic…

Hi, I'm using Sophos UTM 9 Firewall, recently, I started receiving complaints from IOS users that they cannot use WhatsApp, unlike Android users who can use it in a normal way. I tried everything but it didn't work. Has anyone encountered this…

Looking for suggestions on how to find the cause of tcp communication failures. I have some systems running "behind" a DomU SG UTM Firmware version: 9.714-4 on a XCP-ng 7.6 hypervisor with an AMD Opteron 6220 CPU. Everything works fine. Specifically…

Hello Sophos Community, I have a problem with the Sophos UTM 9 firewall and the setup with MFA. Key data: - Sophis UTM 9 (SG230) - version: 9.713-19 - The OTP setting under Authentication Services is enabled - Only one user was added for the test…

Hey everyone, I'm pretty new to UTM and Sophos in general, but the company I work for has some units deployed that apparently need access to Microsoft WebView2. I'm hoping that I can just write a new rule to whitelist a DNS/DNS Group, but I haven't…

Hallo an alle hier. Ich habe eine UTM9 hier und möchte für einen Rechner SFTP freigeben für eine Zieadresse. Der Rechner ist ein Windows Terminalserver. Als Protokoll habe ich SSH angegeben. Als Ziel habe ich den DNS Namen des Ziels angegeben. Wenn…

I think what we all were thinking, finished my Sophos UTM Udemy course, thanks for all of your suppor without this community, it wouldn't be easy as much as it is now, I just wanna thank the Sophs Community for your support. If you wanna take a look…

Hello all, I have a Sophos SG 330 with UTM 9 and am trying to block access to a url ex. https://www.domain.com/page while not blocking the any other page on said domain. That being said I also need to whitelist a few devices by MAC address or local…

Hello, Today i found something weird on my UTM logs, the client downloaded some files from Internet and i see the the traffic it show opposite direction, the download content should appear as Inbound traffic but below screenshot show totally wrong.…

Newbie question. I am running Sophos Home UTM 9 software appliance on a server I built. I have an app running on a single workstation that needs to communicated in and out on ports 4000 and 4001. I set up the following rules but it doesn't seem to be…

Hello, We have debugging mode turned on, but unsure how to disable it in sophos UTM 9 SG310 firewall. Due to which the confd-debug keep filling up the disk. How can we diable it? Thanks for the help, Jesse.

Dears, The WAN Service Providers changed the router recently, after the router has been changed, the interface stat is up and the link is down, after a troubleshooting session we are sure that the router is working fine and all configuration…

Fri Feb 18 15:32:13 2022 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Oct 30 2018 Fri Feb 18 15:32:13 2022 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.09 Fri Feb 18 15:32:13 2022 MANAGEMENT: TCP Socket listening on [AF_INET…

Hallo an alle, ich habe jetzt knapp zwei Abende rumprobiert eine IPSec verbindung zwischen der genannten FritzBox und der Sophos herzustellen. Ich denke ich kenne mittlerweile jeden Artikel in dem es nur ansatzweise um VPN zwischen FritzBox und…

Hallo, wir betreiben eine SG210 mit der Firmware 9.707-5. ich hab seit ein paar Wochen das Problem, dass unser COM Server (nicht in der AD, IP 192.168.1.2) nicht mehr auf eine gegenstelle per SMB kommt. Der Aufruf passiert im Mirth und soll über…

Hallo zusammen, wir nutzen die Sophos SG115 mit der Firmwareversion: 9.708-6 und der Patternversion: 206652 und haben folgendes Problem: Die Software Immotion der GAP-Group hat eine geupdatete Version herausgebraucht, leider werden die Dateitypen…

Hello. I know how to multipath! But i Dont know WHAT t multipath I want each traffic that comes from Zoom Uses interface WAN2 wither zoom web or zoom program or zoom mobile.... I dont know the links or ips that should be placed in multpath! …

Ich habe eine Sophos SG210 im Einsatz FW 9.705-7 Seit dem 15.07. haben wir immer wieder das Problem das die CPU auf 100% ausgelastet wird. Schuld ist immer confd.plx Nach einem Neustart funktioniert alles wieder, manchmal für ein paar Stunden…

Dear Sophos support As tried to share some ideas and its written in the Ideas page but sounds that nobody read :D So I thought to yell my ideas in the support chat but sounds the matter so complicated and the chat Guy WAS NOT helpful.. So i thought…