• Firewall Traffic logs in depth

    Anil Lutchman
    Anil Lutchman
    We have MS exchange servers hosted on our network and Firewall rules, Email filers and NAT configured on our Sophos XG to forward mail to our servers. Recently end users would have reported not receiving certain emails. This is random. After looking at…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Monitoring SOPHOS XG with ZABBIX

    Oriom
    Oriom
    Hello, I monitor SOPHOS XG through ZABBIX and recently I noticed that I am not receiving HA status, we use the firewall in version 18, and this collection worked. After updating to version 19 the collection stopped. Does anyone have an idea how to…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • SSLVPN logs no longer showing source IP Address since upgrade from 18.5.4 to 19.0.1

    LHerzog
    LHerzog
    Hey, since we upgraded from SFOS 18.5.4 to 19.0.1 we can no longer see the source IP a SSL VPN user connected from in the VPN logs. It simply shows nothing or the LAN IP Address of the Firewall in the SSL VPN IP-Range. We only see the real source…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Monitoring logs on the Sophos XGS 136

    John Giovannis
    John Giovannis
    Hi, I'm currently looking for a way to better examine logs (on a daily basis) from a Sophos XGS appliance using some kind of centrally managed log aggregation system. I was thinking of using something like the ELK stack, GrayLog or Splunk. Are there…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Classification question

    rfcat_vk
    rfcat_vk
    Hi folks, a couple screenshots about unclassified protocols. Considering these are known services I would have thought they should be classified as one of the first protocols of the block? Why are they still unclassified? Ian
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Sophos proxy for lan user || websites check ||

    Joy Joy1
    Joy Joy1
    Hi All, I want to know that how can we check which user is going through Sophos proxy toward Internet, Is there any procedure to check in Sophos XG Firewall. Let me give an example - I am LAN user which is using Sophos Proxy in configured…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Query:- Sohos XGS 107 Logs

    Akash Pasi
    Akash Pasi
    Hello Team For how long can we store the logs in Sophos XGS 107 Firewall.
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 310 FW - Config disk usage reached 80%

    Jonathan Martin1
    Jonathan Martin1
    Got a notification that my config disk usage reached 80%. Any idea on how to purge or shrink the size? Currently on: 19.0.1 MR-1-Build365 Message: Config disk Usage reached 80% exceeding the threshold of 80%
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Invalid Traffic (SFOS 19.0.1 MR-1-Build365)

    Ashfaq Shah
    Ashfaq Shah
    Hi, We are getting "Invalid Traffic" in Log viewer for some Ports from DMZ to WAN. The firewall rules are configure correctly, can anybody help to resolve the issue. Thx, Ashfaq
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • generate report for Web usage of application "amazon shopping"

    LHerzog
    LHerzog
    I'm wondering how to view usage of categorized cloud app "amazon shopping" of today. The reports do not contain a single amazon app name nor do they contain contain "online shopping" category. But I can find the application and shopping category detected…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • System commands (CLI) - custom-feature

    Gib GoDesk
    Gib GoDesk
    Hello guys. I wanted to understand the cli feature that is in the Sophos documentation. custom-feature - Allows you to add top users to generated PDF reports. Ref.: system - Sophos Firewall What is it for and how can I use it?
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • SG430 (SFOS 19.0.1 MR-1-Build365) has been running for a long time and was recently upgraded to V19. On-Box-Reporting is OFF and cannot be turned ON

    StevenThraen
    StevenThraen
    Reporting does not work. I reviewed the reportmigration.log, and it seems like the report migration has never worked. The reportdb service is running, the disk space is fine, we have even run a manual purge of all log data. how can this be corrected…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Logging incomplete: Admin Audit logs not showing all changes

    LHerzog
    LHerzog
    on SFOS 18.5.4 and 19.0.1 we still notice that Admin Audit logs in Logviewer are not showing all changes admins make on the system. Example: anything you do with IPS policies is not logged. Adding, changing, deleting other example: IPSec Site…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Sending alert from discover mode firewall

    Yoshikane Oyagi
    Yoshikane Oyagi
    Hi all, Is it possible to send SNMP trap or syslog to a monitoring server (zabbix) when a Sophos XG firewall detect IPS alert on TAP interface?
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Why do I get junk like this in my daily reports

    rfcat_vk
    rfcat_vk
    Hi folks, a question for the more knowledgable about XG mail scanning. My daily reports often show spam recipients which are not part of any mail accounts in my users. The firewall rules are setup to receive mail from only the ISP/RSPs. Ian
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Equivalent to UTM Web Filtering Live Log

    DCALS
    DCALS
    Hi I'm migrating my UTL9 Home to FW 19.0, nearly complete but have a few niggles to sort out. One of them is the log viewer. It doesn't seem particularly quick and is quite chunky. Is there another view or config that can be done to provide the…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Ein Haufen Sophos Webdienste mit Kategorie "none" ...

    Alexander Fuchs
    Alexander Fuchs
    Moin Zusammen, kann mir einer mal erklären, warum diese Sophos Webdienste alle unter der Kategorie "none" laufen? Sophos Ähm, die Kategorie "none" gehört mit zu den ersten Dingen, auf die wir normalerweise als erstes den Zugriff sperren. Sollte…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Missing log messages IDs from XG Firewall SFOS v17.5 to 19

    Freddy Laffita
    Freddy Laffita
    Hi, I have running some rules from third party tool using logs from Sophos XG Firewall version SFOS 17.5. Some of the rules are based on specific IDs from https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Bytes sent incorrectly reported in log viewer

    Ben BP12C
    Ben BP12C
    Hi, We're seeing repeated but inconsistent log entries with the bytes sent in the 4GB region. We use Fastvue and these incorrect bytes values mess with our reporting and make it hard to track down actual high bandwidth users. Some users are reported…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 450 - /var/newdb/base/16386 full

    Stefan Hüning
    Stefan Hüning
    Hey all :), our XG just notified us, that the disk is full. After a little search on Google I purged all available reports. Sadly it did not help. Is there something else i could do. Our Firewall is runnning the latest Firmware that is available 19…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Reports not including all traffic

    BLS
    BLS
    Hi, I've been copying a lot of data over SSL this weekend, and I've noticed that while the current activities window shows the traffic, and also includes the total downloaded, the reporting side of things doesn't This is using the latest v19 MR1…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Web surfing report - No record found

    Guilherme Silva1
    Guilherme Silva1
    Hello time, I'm having trouble viewing custom reports, Web surfing report, which is only in No record found. Other reports are apparently working, but Web Risks & Usage I don't get any reports. In my NAT rule, Log firewall traffic is active and…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Without Reports

    Bruno H Silva
    Bruno H Silva
    Dear Colleagues! The Sophos Firewall stoped to record the reports. I can't see the traffic dashboards, logs VPN Connections and logs webfilter. When I reboot the firewall the logs are created and I can see it. Someone c Post an help me?
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • External Storage for reports

    Guilherme Silva1
    Guilherme Silva1
    Hello, I have the need to use my firewall's report storage on an external device, such as a NAS for example. It happens that I need to keep the Web Surging report for a period of 1 year, and with the current data traffic, my appliance can keep this…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • XG on board reports - accuracy

    rfcat_vk
    rfcat_vk
    Hi folks, a discussion about the use of XG on board reports and their accuracy. The reports provide a summary of the affect of users firewall rules and polocies along with the XG inbuilt functions. So what is reflected in the reports is effected highlights…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>