• You really don't want to buy an appliance without disk

    Wayne Folta
    Wayne Folta
    We have an XGS87 which has experienced lock-up and reboot issues since SFOS v21 came out. Sophos is working hard on finding the problem, and I give the trouble-shooting personnel full credit. BUT it has led me to believe that it's a crucial mistake…
    • 10 days ago
    • Sophos Firewall
    • Discussions
  • SFTP Clientless Not working at all

    Reem Jalal Eddine
    Reem Jalal Eddine
    Hi, I am giving up on this, I have opened a case with sophos but cannot figure out the issue. I have created a clientless VPN sftp for our server. It always gives me read: Connection reset by peer It works perfectly fine with Winscp using the…
    • 10 days ago
    • Sophos Firewall
    • Discussions
  • Firewall Email Protection Logs Empty

    Trio Fandi
    Trio Fandi
    Hi, I just installed a Mailcow mail server, add Firewall rule to allow SMTP services and DNAT + SNAT to our mail server. It's works both inbound and outbound email delivery. Now I try to configure Email Protection in MTA mode, following this guidance…
    • Answered
    • 8 days ago
    • Sophos Firewall
    • Discussions
  • Let's Encrypt WAF best practices Question

    Craig Glaser
    Craig Glaser
    This is a pretty newbie level question. I previously had two websites set up behind a Sophos XG CE firewall using Let's Encrypt on the webserver. (Ubuntu 22.04 Apache). Under this configuration I had redirect HTTP to HTTPS enabled on the WAF, and the…
    • 9 days ago
    • Sophos Firewall
    • Discussions
  • Route all traffic via IPSec

    Dragos Avram
    Dragos Avram
    Hi all. site A. port 1. Lan. 10.10.10.0/24 port2. Wan. 84.153.x.x/32 Site B port1 .Lan 10.10.20.0/24 port2. Wan 63.84.x.x IPsec between sites. all resources are accessible from one site to another. I want all traffic from site…
    • 10 days ago
    • Sophos Firewall
    • Discussions
  • Route SSID to single LAN IP on XPS136

    Jack Drose
    Jack Drose
    We have a wireless network running (2) APX530 and (3) APX320 access points - configured through an XPS 136 firewall. Currently there are 2 SSID's - one for the office with full LAN and internet access, one for guests with WAN access only. Trying to find…
    • 9 days ago
    • Sophos Firewall
    • Discussions
  • Sip from one internal zone to another

    Michael Pousen
    Michael Pousen
    We have our telephones in their own network zone - the Phone. I would like to have have a few mobile devices in a different zone with a sip client be able to access the pbx. Created a rule to allow udp 5060, what our pbx is setup to use for sip, and yet…
    • 11 days ago
    • Sophos Firewall
    • Discussions
  • How can I prevent OSPF from distributing WAN subnet

    Bill Roland
    Bill Roland
    Hi all, I have an XG firewall (v21) that I would like to use OSPF to distribute a couple of routes to my main network which is also using OSPF. I configured it and it is passing routes but it is also passing the subnet for the WAN interface, which I…
    • Answered
    • 11 days ago
    • Sophos Firewall
    • Discussions
  • Replace XG86 with XG88S

    RTW IT
    RTW IT
    1. Using Export of the XG86 and Import on the XGS88 OR Using Backup of XG86 and Restore into XGS88 ? 2. Is there a Grace Period for the License Transfer from the XG86 to the XGS88 ?
    • 11 days ago
    • Sophos Firewall
    • Discussions
  • unable to access http website in win 11 only

    Ravin
    Ravin
    Hi Team, Issue: A Windows 11 PC (PC1) is unable to access a specific HTTP website through the office network. However, the same website is accessible via a mobile hotspot. In contrast, a Windows 10 PC (PC2) can access the website without issues on the…
    • 12 days ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall: v20.0 MR3: Feedback and experiences

    LuCar Toni
    LuCar Toni
    Release Post: Sophos Firewall OS v20 MR3 is Now Available The old V20.0 MR2 Post: Sophos Firewall: v20.0 MR2: Feedback and experiences To make the tracking of issues / feedback easier: Please post a potential Sophos Support Case ID within your initial…
    • Answered
    • 12 days ago
    • Sophos Firewall
    • Discussions
  • cannot ping from sophos device

    Charlie Dodd
    Charlie Dodd
    Hi I am using SFOS 21.0.0 GA-Build169 and noticed that when I use the ping diagnostic tool in the Sophos interface it doesn't work when I select an interface (eg ping using an IP in my networks) I logged into the console of the Sophos device and got…
    • 12 days ago
    • Sophos Firewall
    • Discussions
  • Active Passive HA licensing with a Software SFV4C6 firewall

    despich
    despich
    We have a SFV4C6 firewall loaded on our own Intel Hardware, it has the Base perpetual license along with a subscription for Enhanced Support, Network Protection and Web server protection. I want to setup a passive HA pair and I have the matching hardware…
    • 13 days ago
    • Sophos Firewall
    • Discussions
  • Active Directory Windows Server 2025 not Authenticate Users

    Masoud Hemmati
    Masoud Hemmati
    Hello After upgrading Active Directory Server to Windows Server 2025, Sophos XGS Authentication user Not working and have Problem .
    • Answered
    • 13 days ago
    • Sophos Firewall
    • Discussions
  • sophos Firewall routing for Internal traffic and DNAT

    syed munaz
    syed munaz
    Deployed sophos [ SFOS 21.0.0 GA-Build169] on Azure and below is the detailed info Sophos VM is deployed on VNet-Hub and peered with spoke VNet's VNet-hub: 10.0.0.0/16 WAN (Port1): 10.0.1.4 LAN (Port 2): 10.0.2.4 Routed traffic between PC1 and PC2 through…
    • 14 days ago
    • Sophos Firewall
    • Discussions
  • Zero Touch troubleshooting

    FFin
    FFin
    For every new XGS appliance i'm preparing for customer, i'm trying to use new zero touch. Unfortunately every 2-3 appliances that process fails and needs further investigation. So currently i'm not confident enough to send appliance directly to customer…
    • 14 days ago
    • Sophos Firewall
    • Discussions
  • Google Chrome games

    Christian Garcia N
    Christian Garcia N
    Good morning. I'm trying to block google chrome games, that is, when they enter chrome they type "solitaire" and it lets them play directly from the browser. I am trying with web blocking and application filtering but it still does not block the use of…
    • 14 days ago
    • Sophos Firewall
    • Discussions
  • BLOCK VPN ON WEB AND MOBILE

    Mohamed Arbaaz
    Mohamed Arbaaz
    HI I have a firewal with firewall rules to block social restriction both on web and mobile but the challenge is that users have dowloaded vpn on there phone are able to bypass the policies and have full access
    • 14 days ago
    • Sophos Firewall
    • Discussions
  • Captive portal accepts T&Cs only

    Gary McDonald
    Gary McDonald
    Hi All, Is it possible to setup the Sophos captive portal with a simple "accept terms and conditions" form then grant internet access? This is for our guest Wi-Fi segment of the network. Thanks, Gary
    • 15 days ago
    • Sophos Firewall
    • Discussions
  • No way to allow web proxy access from the WAN interface?

    dirkkotte
    dirkkotte
    Is it correct, that it is not possible to access the web proxy via the WAN interface, even if there is a suitable ‘Local service ACL exception rule’ ... or does anyone have a solution for this? I always get: ‘Appliance Access - Denied’ Background: in…
    • Answered
    • 15 days ago
    • Sophos Firewall
    • Discussions
  • DHCP lost to all devices except one vlan

    Reem Jalal Eddine
    Reem Jalal Eddine
    hi i previously posted a question on how to migrate trunk vlans from one port to another mew port for lag configuration. Once i did the transfer we lost connection with dhcp all clients cannot get ip address but once they get a static ip the communication…
    • 15 days ago
    • Sophos Firewall
    • Discussions
  • how to enable SFOS authentication with different UPN and SamAccountName

    LHerzog
    LHerzog
    I have learned how to support UPN or multi UPN configuration with local Host / DNS registrations on the Firewall directly. I have configured that successfully on the firewall. Sophos Firewall: Authentication Multi UPN configuration But as written in…
    • 17 days ago
    • Sophos Firewall
    • Discussions
  • No access to Sophos XGS

    André Heckmann
    André Heckmann
    Hello everyone, I have registered a new firewall in Sophos Central, just as I have done countless times before. However, with this firewall, I am facing the issue that I cannot access it. Every time I try, I get the following message: "FIREWALL SESSION…
    • 17 days ago
    • Sophos Firewall
    • Discussions
  • when will IKEv2 come for remote access?

    LHerzog
    LHerzog
    When will SFOS support IKEv2 for Remote Access? I was expecting a technical problem when I tried to enable IPSec RA and it did not allow me to select the default profile. I could not believe, this is not supported on a modern firewall. Vivek Jagad…
    • 18 days ago
    • Sophos Firewall
    • Discussions
  • IPSEC ISSUE || PHASE 2 NOT UP

    SatyabrataB
    SatyabrataB
    Hi, we are trying to configure IPsec tunnel between Sophos and Cisco ASA all configuration phase 1 and phase 2 are matches both sites. phase 1 is up but phase 2 is down i have checked logs below error message we are getting. 2024-12-05 13:15:08Z…
    • Answered
    • 18 days ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>