I'd like to export an entire report to PDF from Sophos Firewall but it won't let me. For example, this report is 14 pages but I can only seem to export 200 records max.

Is it possible to filter more than one port in the log viewer? I am trying to find some specific traffic and i want to exclude both 443 and 123 but I cant seem to stack the filters. Thanks!

Dear Sir How and where I trace a Local IP address that is consuming my Internet? Thanks Muhammad Alyas Qaisar

(simple ANY rule with a lot of traffic -> should be in LOG)

Hello, Shortly after we updated to XG 19.5.2 we noticed that DHCP renewals were no longer logging in the System logs of the live viewer. There are no "DHCP Server" events shown at all. There have been no config changes since the update and DHCP is still…

I have a xgs 87 and reports were working fine all of a sudden they just stopped - unit showing connected in sophos central. Have removed and re added also to no avail. how do i get reports working again. PS have done the obvious thing and restarted…

Is it normal that in the FW Logs is sometimes a zone entry and sometimes not? The FW should in any case know what zone the paket comes from/to.

Hi all, UTM had a brilliant logging system, but Sophos Firewall do not log many days behind, which is of no use, because we often need to go further back. Sophos Central logging we also find lacking a lot, ex. dropped packets are not logged (But maybe…

I notice many firewall denied firewall logs created by a rule, that is an allow rule only. Even more strange is, that the port 1027 logged is not contained in the rule. Watching the traffic with drppkt shows no blocked packets. Tcpdump shows the…

Hi folks, I am investigating why one of my VoIP phones has failed. I have searched logviewer and its many sub-menus and not able to find any SIP traffic (UDP port 5060) or even using the ATA's IP address. Please advise how I find the SIP traffic?…

I do not understand why this happens. I noticed it when I was in firewall log and build a filter like this: It does what it should do: If I then switch the log to TLS Inspection, it shows me only allowed traffic. I know that this filter "allowed…

Hi, is it somehow possible to convert FirewallRule XML export from XG or XGS to some readable form for example to Excel with all needed items like list of all used source, destination networks etc. We need to convert XML to some sort of table form for…

Hi, I'm having trouble with the WAF, XGS 2300 v19.5.1 I add the webserver web .xxx.xxx - it has policy ID 129 . But if I go to web .xxx.xxx in the log it shows that web.xxx.xxx has policy ID 43 . I get a 503 error But the policy ID 43 is spsluzba.xxx…

Hi We're receiving notification almost every day that is stating Message: Reports disk Usage reached 91% exceeding the higher watermark of 90% But when I ssh to it, it shows me 86%. I receive multiple emails in a same day. …

Log Viewer > Firewall goes back by 10 days or so. I need to retrieve Firewall logs for a period of 2 weeks starting 20 days ago. I've learned that XG(S) do not store log files for Firewall rules. From other posts I've also learned that I should use…

Hi Sophos, I'd like to generate a view and report on how many users are concurrently connected to the Sophos Appliances in operation so that we can spec for a replacement unit. IS there such a feature available? We are running SFOS 19.5. We…

Hello, are there any options to see the count of the dropped sessions on the WAN interface over a time period? best regards Harald

On our XG430 firewall we have some interfaces only the active ones are ~40 VLANs, ~40 REDs, ~30 virtual WiFi networks and adapters, ~10 physical interfaces Currently I monitor CPU load from time to time. Unfortunately, due to all graphs are preselected…

logs are not updating on GUI log viewer dis space is not high all services is also running, kindly help how to identify this issue and what action have to take to resolve -

Hi, We are facing issues in report generation. I've checked all the logs and all things seem normal. PFB: Regards, MAS

Hi, we are using Sophos XG-210 now signature disk usage reached 78% is there any way to clear old signature. Thanks satya

I performed the eicar test where I attempt to download the Eicar virus testfile. The block page shows that the file eicar.com was blocked by filetype. However, the webfilter log shows that the website was blocked, but does not specify that it was due…

Hello. We have a FW XG230 which is configuring the Syslog but you want to send the logs through a VPN site to site, the vpn connection is made and policies but it does not send any information. I would like to know where the error could be or how…

Good morning guys. Sophos XGS Firewall 126. Is it possible to generate a report on accesses to sites by user over a period of 15 days? I can VIEW the accesses, but when I generate the report, it only generates 1 or 2 days

Hi guys, I'm capturing SNMP traps from an XG appliance. Everything works fine with SNMP version 2, but I'm unable to capture traps with SNMP version 3 because it seems that the XG appliance is sending an incorrect EngineID. To detect the EngineID, I'm…