Hello everyone, I have the following question. We have a customer with an XGS 3100 with version 19.5.3. The Sophos serves as a mail gateway/relay and is connected to Sandstorm. Now the question was whether Sophos can also check web links within incoming…

Hello, as the shared mailboxes that we use almost exclusively cannot use the mail quarantine, we have not been using mail quarantine since the switch to SFOS. Recently, however, important messages have been ending up in quarantine again due to an allegedly…

I can only see "Reject" events in the GUI when going to Email -> Mail logs. I do not find them anywhere in any of the built-in logs and they are also not sent as audit logs. The other SMTP Anti-spam events "Dropped" and "Delivered" are both logged in…

Hello, We use 2 WAN interfaces but want to route the outgoing SMTP traffic via one interface. What would be the best approach here?

Hi, I am prepairing configuration to use XGS as MTA and I have some questions which I don't find answers to. Current situation: External MX and MAIL-out server are used, Exchange is set up locally. We have /24 public IPs on that site and only…

Good day, our Sophos XG330 acts as an MTA in our network. We have an on-premise Exchange server for whose domain we have created an SMTP policy in the Sophos email settings. This is working very well so far. Now we have to enable our users to integrate…

Hello, I delete the MTA SMTP default rule, cause it seems to do to much. How is this rule used? How do I get it back? MTA Switch to Legacy and back? Config stays at it is? Thanks Sven

We disabled legacy TLS protocols and some of the legacy vulnerability did get mitigated. But we still have TLS1.1 vulnerabilities as per our vulnerability assessment tool. Is Sophos planning on removing TLS1.1 support from SMTL TLS config setting? what…

We use Sophos Firewall as EMail Protection for incoming Mails. Firmware: SFOS 19.5.3 MR-3-Build652 SMTP deployment mode: Device acts as a Mail Transfer Agent (MTA) DKIM Settings: DKIM is set to accept, some mails will be quarantined by DKIM verification…

Hi Our Sophos XG acutally moves much mails to quarantine which are not spam. For me, it looks like most of them are sent by automated mailsystems (a lot of them are invoices from partners, sent automatically to our invoice-Mailbox) The big Problem…

One of our customers is encountering the following DKIM issue. Emails from two suppliers are consistently being quarantined due to DKIM verification. The selectors are as follows: s=strato-dkim-0003 c=relaxed/relaxed a=ed25519-sha256 b=512 s=strato…

Hello, Yesterday we have upgraded a Sophos XGs cluster to firmware 19.5.3 MR3-build652 and we noticed that one of the 2 nodes was greylisting e-mails coming from addresses that have e-mailed this organization in the past. Once we failed the nodes over…

I was having an issue getting an email to an address and discovered the address (which is actually an alias for another account) was failing on the Callout. I found that the alias had been deleted so I remade it. I'm still getting a failure on the…

Hello, lets say, I have two external IPs: 80.0.0.1 and 80.0.0.2. 80.0.0.2 is an alias on the WAN Interface, 80.0.0.1 is the primary IP on the WAN Interface. I'd like that if my traffic leaves the firewall, the source IP should be 80.0.0.1, except when…

Why is this list unsorted? I suggest an alphabetical order. A list field implies being sorted in a way that you can easily find entries in that list or add missing ones.

Is it possible to set up the XGS126 to scan incomming pop mail attachments on mailware?

If an email with the MIME type content (image/png) is blocked by the previous UTM solution I could release it in the "Mail Manager" in the tab "SMTP Quarantine". Can I achive the same in the XGS solution? regards

Hi, just found out, that mails sent from SFOS 19.5.2 MR-2-Build624 are missing the Message-ID header, required by RFC. Not a critical issue, but our mail archive softwares complaines each time, a mail from our XGS should be archived.

Hi, and thanks in advance for any help. we have some items in the smtp quarantine that cannot be deleted from the console. Can we ssh into the firewall and delete form the file level? I have found a directory /var/quarantine but not not sure if I…

Hi folks, I am trying to understand why my XG115W tags my daily reports from the XG as being possible spam? Below is the mail scanning rule that causes there issue. The mail rule is a XG default rule and has recently started the action.

Is the firewall (MTA mode) not accepting SMTP with SSL/TLS also on port 465/587? My Epson printer is not able to connect on 465/587 with the firewall: /log/smtpd_main.log -> nothing in log /log/smtpd_reject.log -> nothing in log ACL violation? Source…

Hey Sophos experts, We are about to switch our UTM SG against XGS soon. Currently our reseller is not really advertising the Mail Gateway in XGS and is proposing to get another mail solution. The reason: according to them, the XGS has an open mail relay…

Dear Sophos Community, we are facing the following situation: - 2 WAN IP addresses - 2 Interfaces each holding one of those IPs - we need one WAN IP address on the Mail Protection feature (incoming mail from the Internet) - we need the 2. WAN…

I'm not sure if i should be posting in this section or the XG Firewall section. Long story short, we have implemented DKIM,DMARC, SPF and TLS for our emails. (Google Workspace). Everything is working as expected with the exception of emails sent…

Dear Community, my name is david lorenz from germany. We have a problem with many of our customers. They get mails from newletters. The probel is that the sender does not send with the correct domain. So I cant whitelist the domain as wildcard in…