HI, we have our firewall configured as transparent emial proxy. All works well, except the following: We can receive all mails from a domain @example.com except for user1@example.com and user2@exacmple.com All other mails from @example.com are delivered…

Hello guys our client has XG230 He says that emails for internal communication have to work even when there is no internet. Kindly guide me on how to do it in sophos.

Hi, we have added a web server behind the WAF in DMZ zone. LAN/WAN- we can access the web server through a public IP address. we have a backup server in the LAN zone. How to do backup Lan to Dmz zone using public IP or private IP of server…

I am trying to access the website https://uae.tweb.ttfuel.com/v2/ . Its accessible outside the office network. But its not accessible inside the network. Its saying site can't be reached. I am using Sophos xg firewall and I am new to Sophos. I think firewall…

Hi, I want to know how to scan the email attachments and get report of word, excel, pdf files shared by users on email. Can we also see the contents of the file ? we are using XGS136.

Dear Support Team, Dear Support Team, I have Sophos Firewall XG330 (SFOS 20.0.0 GA-Build222) The Web policy is not working. when i blocked the https then all site all blocked. i checked the policy tester. its web policy is working. But when we open…

I’ve noticed that some sites subjected to TLS inspection still present valid certificates from reputable CAs without generating on-the-fly appliance certificates. This behavior seems unusual because, typically, I would expect the appliance to generate…

We have a learning website, that we want to allow YouTube access to. The website contains YouTube videos that we want to allow. But on the YouTube website we want to block YouTube access. Currently YouTube is being blocked with Application filtering.…

Hello everybody, I created a rule to prohibit the social network Facebook in Web then Policy, I applied it to a Host, I created a new firewall rule where I applied this, then activated.the rule does not work and facebook still works. How to make the…

Hi anyone can help me,currently i have implement WAF to my mailserver that have activesync,for now the waf rules listener port are 443 but how to allow any services like smtp/smtps/imap/ or pop3.im facing issue with slow login and cannot sent email out…

Hi, I would like to block inbound emails by email domain extension in my SOPHOS FIREWALL, for example: .ru .cn Now i'm blocking by the complete domain (*@domain.extension), but i would like to block by domain extension. Thanks Nuno Mo…

Good Day, As I only found old posts about this subject, here is the question still at hand: Is changing the language of the Quarantine Digest Report Email a thing yet or not? (Or even better - Writing your own) This has been requested a few…

Dear All i have this problem in pic i tried to close category (travel ) but as an execption i opened this site called (Tripadvisor) it opened but this is always the view ??? can u help me please ?? i hae to open the travel category to open normally…

We noticed that Microsoft Office was not updating, so we added the Microsoft Office exceptions as per Sophos Firewall: Configure web exceptions for Office 365. Next, we encountered an issue where Google Chrome wouldn't install, so we added the exceptions…

how can i block dawnload portable application?????

I have enabled SSL/TLS inspection to do MITM for HTTPS(443) trafic from LAN to WAN. I have push by GPO certificat CA to windows computer. That work just fine for most site. Now I have an issue with site that have HSTS enabled. For those site that enable…

Hi Community Members, I hope this message finds you well. I am currently exploring the best practices for protecting web servers, particularly in scenarios where the firewall is not acting as the gateway, The XGS also acting a reversed Proxy.. Your…

On Sophos firewall is there a way to configure it in such a way that names of people who are on email database are listed on the firewall such that any mail which has an email address which is not on the list does not pass the firewall. This we would…

Hello, I am running SFOS 19.5.4 and I noticed that I cannot get to any secure apple.com website since the last update. I try to go to apple business manager (business.apple.com) and it will just spin and eventually time out. I also tried to purchase a…

Hi, I can't see any way of adding additional RBLs to the XG email protection. Is this not possible?

Hi All, Sorry if this has been asked previously, I have combed through the forums and could not find a solution or direct discussion to this specific issue I am facing. We have signed up for the Sophos XG Firewall via the Azure marketplace image. I am…

When I go to edit the certificate and upload the certificate which is due for renewal ( every 13 months ), it fails with the following error at the top center of the screen: Certificate could not be updated as it is already used by HTTP Based Policy…

Hai, I have purchased new firewall XGS2100 and configure settings for auto scheduler backup. But i didn't receive backup mail and even test mail also. Kindly suggest how can fix the errors!. Senthil Asia

Hello, We are using the DPI engine and have created SSL/TLS inspection rules. Unfortunately, we receive a certificate warning for some websites even though the firewall certificate has been imported. What could be the reason for this and how can we…

Hi Everyone We setup MTA according to this URL: https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailSetupMTAModeWithMultipleWANPortsOrAliasIPAddresses/index.html#change-the-route…