Hi there, I’ve configured WAF for an Exchange Server 2019 according to this guide: https://www.frankysweb.de/sophos-utm-9-4-waf-und-exchange-2016-ohne-rpcoverhttp/ OWA and ActiveSync works fine but I have trouble getting Outlook Anywhere working…

Hello, We have a protection Policy for the NextCloud on Sophos, unfortunetly we have many issues with uploading Photo (many times the upload not working at all what ever is the Photo size or extantion ), every time we must connct to SSH to check the…

I received the following email, this morning: The Terms of Service for Let's Encrypt have changed. Please go to WebAdmin to review and accept the new Terms of Service, otherwise you won't be able to create and renew Let's Encrypt certificates. …

Hallo zusammen, ich habe ein Problem mit der WAF, nach dem Update von 9.7.12-13 auf 9.7.17. Die WAF bringt in der GUI den Fehler "in error". Anbei das Log: 2023:11:02-10:19:05 remote-1 httpd[9443]: [proxy_http:error] [pid 9443:tid 3791485760…

We’ve recently upgraded one of our server apps and it has a minimum TLS version of 1.3. WAF doesn’t seem to let things through on it, and the ‘Real Server’ has an exclamation mark next to it: Makes no sense why the top one has a green tick but the bottom…

Right now the WAF is showing as the source ip address in the log files of my servers. I'd like to see the public ip address of the clients that are accessing the servers. I've enabled "pass host header" but that doesn't seem to do it. Is this possible…

I'm using the WAF as a reverse proxy. I'm wondering if there is a way to block or whitelist access by ip address? i found this post from 9 years ago saying it'd be available in 9.3 but if it's available now i'm not seeing it: RE: Source-IP filter…

Hello. I am using UTM version 9.7. I have configured a web server inside with UTM's WAF. But when I access the site from outside, I cannot see the site properly because of garbled characters like Arabic characters. Can someone please lend me some…

For all searching for this Problem with Teams not showing the calender app using hybrid szenario. Refering to this basic guide: Sophos UTM: Create WAF to allow traffic through Exchange 2016 using the MS Connection Tool: https://testconnectivity…

Disclaimer: The content is published as-is, without any expectation of official support or guarantees. Please contact Sophos Professional Services if you require assistance with your specific environment. Overview This article contains steps to create…

Hi, We are experiencing an issue with our website behind WAF on Sophos UTM. I have been toying around with getting our site to work via Web Protection for users outside the internal network. This log entry indicates that ModSecurity, a web application…

Hi Community, I would like to confirm whether creating an exception in the Firewall Profiles section of Webserver Protection and adding a bypass rule for the path "/Test/Images/static/roboto/" would exempt only the exact matching path or anything…

Hi, For a few days now i'm struggling with getting my 2019 RDG to work behind my Sophos UTM WAF. I've tried multiple configurations found on the internet, but i'm still unable to connect to my RD Gateway 2019. After entering my credentials i recieve…

Integrated Site Web services with company internal software Web Service URL - br.ampbr.com/.../hh Site Web Public Ip -162.11.15.15,119.14.15.12 I have a DMZ server which run application ,to which this URL is integrated by API programmer I need…

Situation: My home UTM (9.713-19) has two internet connections, a primary over fiber (interface A), and a backup over DSL (interface B). For outgoing traffic, uplink balancing is used to create an active/passive setup, and there are some VPN's which…

Hello, I am trying to configure UTM9 Webserver Protection feature to manage several domain names, routing to specific web servers in DMZ, through my one and only public IP. I have 2 DNS entries pointing to the same public IP: sub1.mydomain.com sub2…

Good evening. I am trying to set up the UTM ( 9.711-5) to handle the websites from the IIS machine. I currently have WAF working with Exchange. So I have DynDNS entries for the DNS names that I need for the two sites, both point to the IP address on the…

Hello, I have a problem with Sophos WAF and the external access to specific SAP Business One Services. The access works completly fine with NAT however the company would like to use WAF for providing external access. We get a HTTP ERROR 500 when trying…

Hello, i use a reverse Proxy (Basic Auth) to protect a internal Server - so every logon has to login first. But now i want to splitt it - so thats only auth is required for Internet and external Networks (VPN, Wireless and so on). For Internal Networks…

Hi there, i've have had quite the journey with WAF on UTM in conjunction of RDG 2012 R2 - 2019. I'm very much in at the end with everything working flawlessly (Android, iPhone, conventional RDP, Remote Apps, and the HTML5 RDS Webpage). Since everything…

I configured the WAF protection for my apache2 server, but when i use waf tools to test it, it doesn't seem like works and I don't see any logs except from 127.0.0.1, did i missconfigured it?

Hey everyone I want to test the Sophos UTM Webserver Protection future, any idea how can i attack theservers behind sophos, also what should be runing on servers? I've 3 server ready to use.

Hello. This is a follow upto an old thread from about a year ago: https://community.sophos.com/utm-firewall/f/network-protection-firewall-nat-qos-ips/126571/microsoft-teams-calendar-through-waf (that thread is now locked) I've tried again to enable…

Hello eveyrone, I have created a WAF rule on all my Website, which is in "moitor" mode : I went to reverseproxy.log to see if I had errors, warning... and I have many many logs like : [cookie:error] [form_hardening:error] [security2:error…

2022:02:02-16:32:33 cloudoffix httpd[19305]: [proxy_http:error] [pid 19305:tid 3783355248] (70008)Partial results are valid but processing is incomplete: [client yy.yy.yy.yy:49995] AH01110: error reading response 2022:02:02-16:32:33 cloudoffix httpd:…