CPU Consumption is very high some time it is going up to 98 % I Stopped Below Highlighted service after that CPU is under control but the AV & IPS Services are Required for Firewall. stop the required services is not a good practice

Hi guys, I'm having a problem with my firewall's memory. According to the screenshots below, the memory increases gradually over the days, until it reaches a point where the firewall freezes, making it necessary to physically restart. Would anyone…

Hello there, I have 2 Sophos Firewall connecting to Networks with IPSeC Site-to-Site VPN 1 Public IP for each network. XGS107 ( SFOS 19.5.3 MR-3-Build652) XG135 ( SFOS 18.5.2 MR-2-Build380) Network A 192.168.1.0/24 IPSeC gateway 172.16.21…

Good day We want to configure network quota surfing on users .. but we want to exclude emails from being accounted for .. like when the users has depleted his or her data for the day, but we want email to continue flowing. Is there a way to achieve…

Migrating our sites, and my brain, to sophos XGS from UTM In the UTM when I setup multiple WAN interfaces for uplink balancing, the object Uplink Interfaces was created. I could then use this object for things like the masquerade rules I do not…

Hello, We use several networks and several public IP addresses, which are stored as aliases on the WAN interface. How do I configure the NAT rule so that, for example, the public IP address xxx.xxx.xxx.xxx is used for network A and the address yyy.yyy…

Hello! I searched the forum but didn't find any relevant information. It's about a Sophos XG210, connected to a few RED boxes. A hardware terminal at a branch office, connected via RED, communicates with the software in the HQ via port 8015. Unfortunately…

Hello Sophos Team, is there a Documentation on what URLs / IPs need to be in a Firewall Rule for Destination Host? I know the Ports that are needed: HTTPS / NTP / DNS -> Forwarded to Firewall IP and Uplink to DNS Protection Just found a List for…

Good afternoon I work at Virtual Box. I have three virtual machines. The first is the Sophos firewall, the second is the Windows 10 client. And on the third I have an Ubuntu server. The task is to block traffic from the Windows 10 client to the Ubunu…

Sooo when scanning the system i've noticed 113 is the only port showing as closed / reject. Since the other ports are Drop I've created a rule to drop 113 from all connections but SFOS isn't honoring the rule. Why? Why would they decided to reject only…

Hello dear all, I'm connected with one of my clients via LAN, without going to the internet, just a LAN to LAN connection to have access to their server. But the port open to receive SNMP traffic is blocked from time to time, and I no longer receive…

Setting up Blink Cameras and the XGS126 is blocking communication with the Blink Servers. Have updated the policy to allow 554, 443 and 80 for the camera's IP Group but still no go. Anyone else got this to work ??

Are there any known issues with XGS and Starlink connections? We deployed a Starlink this weekend as a replacement for a traditional satellite service, but found that after a few minutes the connection stops passing traffic, with WAN link manager reporting…

Hello, we have a problem with our client where we put Sophos XG135 with latest update 20.0.0 on their network, like every day at the same time somewhere around 12:30-1pm and in the evening around 7-8pm, the internet stops but Sophos continues to work…

I'm having to restart this system to get Firewall / NAT rules enforced when changes are applied. This seems to happen with quite a few people in the community. I've found sometimes disabling the firewall rule that feeds a NAT rule loads the additions…

I have a Unifi USQ Pro 8-port connected to my Sophos XGS116 using an LC duplex fiber cable. No problems! Can adopt Unifi WAPS connected directly to the Sophos switch. All DHCP server info is being passed nicely from the Sophos firewall to the Unifi switch…

I like to open the internet access on the firewall. My Firewall is set up as airgap device. One laptop is connected to it to access the web console of the firewall. That laptop can access to the internet. Could you advice me how can I configured my…

I've been facing an invalid traffic issue with an XGS5500 (SFOS 19.5.2 MR-2-Build624) for a few days. the connections of some PCs to a particular domain seem to work but then I start to log errors such as "Invalid traffic". The firewall rule is a simple…

Hello, Is it possible to get 10gbit connectivity on xgs 116? Are there any expansion modules for this firewall? Thanks

Hello All, Yesterday my Firewall start trigger IPS alerts, 8 in totals. I see a specific WAN IP address in the rapport i want to completely block. I have read couple older disscution but nothing fully help me. I have already do this firewall rule: …

Good afternoon I have a problem that when I create a policy for firewalls and it is activated, it does not work. My goal is that I want to block access to the Internet, that is, so that when I go to some web page, my access is blocked, so that a message…

Hallo @all, at the moment I have 2 WAN gateways (default gateways for all my networks): WAN GW 1 (active) WAN GW 2 (backup, will be active if GW 1 is failing) What is the "right" way to add a third WAN Gateway (independent from the other 2 WAN GW, without…

Could do with a little help in recovering both my physical port 5 and virtual interface from a bridge that’s no longer responding to any configuration options. Initially the intension was to bring together DLAN devices over the physical port and those…

Hello! Sophos SG310 V2 ISP: Cable: 940/50 I was running V20 GA for a couple of weeks, but I was seeing alot of glitch with online gaming and sometiems website would take a little longer to load. I saw also in the FW alot of Could not associate…