Hi, until last week i've used only the web proxy funcionality. Now i've configured the SSL/TLS Inspection and have a strange behavior. The Veeam Backup and Replication Server (Backup03 - in Backup-LAN) can backup the ESX-Server in LAN. But the Veeam…

Hi All I am facing a strange error whereby there are no logs in the SSL/TLS inspection even though it SSL inspection is enabled and sophos is MiM the tls traffic. SSL Traffic is sucesfully decrypted on the end client using a custom CA. Logging in enabled…

I would not expect this on a Sophos machine: 2021-11-25 16:32:12SSL/TLS inspectionmessageid="19017" log_type="SSL" log_component="SSL" log_subtype="Error" severity="Information" user="me" src_ip="xxxxxxxx" dst_ip="23.36.239.66" user_group="xxxxxx…

Hello all, first of all our config: XG210 HA (SFOS 18.5.1 MR-1 build326). We currently have the following problem: Web Proxy off, DPI on: good performance, no noticeable limitations except for one application. The application is called WRIKE and is…

Hi to all, I'm pretty new with Sophos XG Firewall. I have a networked printer via LAN that needs to communicate with the outside to send status reports to the control panel via SSL. Is there a way to allow this on the firewall? My idea is to create a…

This is bad? Why can't my xgs decrypt all traffic?

Hi community I have a web policy that blocks particular urls of which youtube is a part. The concern that I cannot properly block the youtube.com site on my network when I use the DPI filtering mode. The site is inaccessible but the notification returned…

Hello everybody. Is the following statement true for XGS series products? SonicWall DPI-SSL scans all SSL/TLS traffic to decrypt, inspect, detect and mitigate hidden cyber attacks. Sophos has Proxy-based SSL decryption only on port 443.

Hello, I have noticed something I didn't expect and wonder if I misunderstood something or my firewall is "misbehaving". To decrypt HTTPS traffic I have to enable "Scan HTTP and decrypted HTTPS"... ... and need a TLS Inspection rule that decrypts…