• Firewall in front of Router ?

    JohnMMM
    JohnMMM
    Can someone please tell me whether it is possible, and if so how, to put the Sophos Firewall between the connecting clients and my ASUS Router ?. The reason I ask is I want to have better logging of what sites are being being visited . Thanks
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Loopback Management interface

    mohammed kassouat
    mohammed kassouat
    Hi, I'm reaching out because I'm interested in configuring a loopback interface to manage Sophos. I prefer not to use the IP from our management network for this purpose. I attempted to create an alias on port A, and while I can successfully ping it…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • IPs outside our range ips.

    Fernando Pablo
    Fernando Pablo
    We have 3 IPs outside our IP range. These IPs are in the range 192.168.10.1 and our IPs range are in the range 192.168.1.1, what can I do in our Sophos model FW firewall? Thaks in advande
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Sophos PPPoE wrong credentials

    admin_idl
    admin_idl
    Hello, We have switched from an XG to an XGS with backup/restore. A WAN connection works via PPPoE. This runs smoothly on the old XG. However, after we put the XGS into operation, the Internet connection did not come online and there was an error message…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Cant get a simple directly connected network firewall rule working. XGS126

    PeteH
    PeteH
    I am completely stumped by this. I am sure its something obvious that I am overlooking. Lan Port 1 - 192.168.1.254/24 MGMT port 5 - 172.16.0.254/24 I already had a rule saying mgmt subnet source 172.16.0.0 could access lan subnet destination 192…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Any/Any rule still showing Violation in packet capture

    Ben Woolley
    Ben Woolley
    What did I do wrong?
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Update (patch) DMZ linux Server

    Sofos network
    Sofos network
    Hi I have a linux server in the DMZ, and I want to manually patch it from time to time. so I want to open access only during patches then close access to WAN. what are all the rules to put in place. well I'm going to choose the scheduled time tab.
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Two site URLs, 1 public IP, PAT to test server on 443

    Ian McGuinness
    Ian McGuinness
    Port forwarding rule I have an external ip address (PortB:8) currently used for a production website on port 443. I would like to be able to access a test web server via the same public IP via port 65443 and translate to port 443 at the server.…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • how to block brodcast local ip adress in my local network

    cybero@m
    cybero@m
    how do I block traffic from a brodcast address in my local network?
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Forwarding non-standard ssh port to standard ssh port internal (remote SFTP Server)

    Sofos network
    Sofos network
    Hi all, # XG330 I have a project to set up an SFTP server to transfer data securely from a remote station to the SFTP server located in the DMZ.(Head Ofice) the server is installed, configured and integrated into the dmz. the remote client uses an…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • XGS 3100 becoming unresponsive and requiring hard restart

    Admin O'Mara
    Admin O'Mara
    We have an XGS 3100 which approx. every 1-2 weeks becomes unresponsive and requires a hard restart as it completely stops functioning. We have a smart plug connected now, which automatically powers it off and on again if the network goes down to mitigate…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Facebook Messenger End to End Encryption not sending messages behind Sophos XG Firewall

    John Novie Cabellon
    John Novie Cabellon
    Does anyone experienced the same thing? Messenger app chats with End to End Encryption enabled cannot send messages behind Sophos XG Firewall. There's also a lot of ISAKMP VPN hits in the traffic insights recently. I'm also thinking my XG instance is…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Override the server header

    Kien Trinh2
    Kien Trinh2
    “Our penetration testing team has discovered that our servers are responding to client requests with the server software name and its version. For instance, the responses include identifiers like “openssh_for_windows_9.2” or “nginx 1.22.1”. Does anyone…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • 1 ISP WAN, 18 ISP LAN addresses - how to I setup a port for an edge router to go out ISP LAN IP

    avett1058
    avett1058
    We have 1 WAN IP from our ISP 18 LAN IPs from the ISP Current setup is one CAT6 from ISP to Sophos Firewall. Firewall has the 1 WAN IP interface setup for internet We need a port enabled for on the firewall for a Vendor router to use one of the…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Bypass - The trust status of this website's certificate could not be securely established.

    midnightSun
    midnightSun
    Good Eve. Trying to connect to a network switch via https. Error page : The trust status of this website's certificate could not be securely established. About this request URL: https://somePublicIP Certificate details: Valid From: Feb…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Management Network Unable to Contact Internet. All other VLANS/Network able to contact internet

    Kylar Harvey
    Kylar Harvey
    Hello Everyone. I have my Sophos XG Virtualized in proxmox on a Dell PowerEdge R430, and it is working beautifully, except that my management network doesn't seem to be able to contact the internet, and I'm not sure why. I believe it's because the devices…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • How do i link a NAT rule to a firewall rule?

    Tomas Z
    Tomas Z
    I created a new rule which allows traffic originating from VPN subnet to the external IP address. I verified in the logs that the traffic passes by unobstructed. Also verified in SSL VPN settings that the particular VPN profile contains that IP address…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • CPU Consumption is high

    DevK
    DevK
    CPU Consumption is very high some time it is going up to 98 % I Stopped Below Highlighted service after that CPU is under control but the AV & IPS Services are Required for Firewall. stop the required services is not a good practice
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • High memory usage - XG 135 SFOS 19.5.3

    Alves I
    Alves I
    Hi guys, I'm having a problem with my firewall's memory. According to the screenshots below, the memory increases gradually over the days, until it reaches a point where the firewall freezes, making it necessary to physically restart. Would anyone…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • SNAT over IPSec XGS107-XG135

    Dimitris Roubos
    Dimitris Roubos
    Hello there, I have 2 Sophos Firewall connecting to Networks with IPSeC Site-to-Site VPN 1 Public IP for each network. XGS107 ( SFOS 19.5.3 MR-3-Build652) XG135 ( SFOS 18.5.2 MR-2-Build380) Network A 192.168.1.0/24 IPSeC gateway 172.16.21…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Excluding emails from network quota surfing

    Anesu Dangarembwa
    Anesu Dangarembwa
    Good day We want to configure network quota surfing on users .. but we want to exclude emails from being accounted for .. like when the users has depleted his or her data for the day, but we want email to continue flowing. Is there a way to achieve…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS Uplink Interfaces

    HopefulSoul
    HopefulSoul
    Migrating our sites, and my brain, to sophos XGS from UTM In the UTM when I setup multiple WAN interfaces for uplink balancing, the object Uplink Interfaces was created. I could then use this object for things like the masquerade rules I do not…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS chnage outgoing WAN Address

    admin_idl
    admin_idl
    Hello, We use several networks and several public IP addresses, which are stored as aliases on the WAN interface. How do I configure the NAT rule so that, for example, the public IP address xxx.xxx.xxx.xxx is used for network A and the address yyy.yyy…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Invalid Traffic + Invalid TCP destination port (dest_port="0")

    Lightyear
    Lightyear
    Hello! I searched the forum but didn't find any relevant information. It's about a Sophos XG210, connected to a few RED boxes. A hardware terminal at a branch office, connected via RED, communicates with the software in the HQ via port 8015. Unfortunately…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Switch and AP6 URL Allow List for XGS Firewall

    Eli
    Eli
    Hello Sophos Team, is there a Documentation on what URLs / IPs need to be in a Firewall Rule for Destination Host? I know the Ports that are needed: HTTPS / NTP / DNS -> Forwarded to Firewall IP and Uplink to DNS Protection Just found a List for…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>