Hello, I have a problem with our Firewall. We have a service Provider who takes care of our website, which is hosted by them. When they do any changes on the website, I cannot see these changes while connected to the internet through our firewall. If…

Hello everyone, At the moment we are thinking about changing from Web Proxy to DPI on XG 230. As I understood from public documentation, there are some features, only supported with Web Proxy mode, but we are not using any of these currently. Therefore…

Hi everyone! we have a problem that we can't solve. We have two MTA servers in our network: the production one and one in the Test Net. We have recently migrated from SG to XG, and since the migration, we are no longer able to send Emails within the…

Hello! I'm trying to setup a Web Server Protection Rule for my home automation system. I have a lot of other WAF rules which work perfectly. I'm only having trouble with this one rule, where I get the following error: I just can't get this rule…

Got a nagging but not serious problem (I bet it's not really a problem) On my client networks, if a user has an Apple device, any email they check on that device while on my networks will not load images in an email automatically. [insert snide remarks…

Hi there, we have an internal URL (like server1/.../access.php This link is designed to be accessed directly from the Internet and we would like to make it available to the public. But as this link is quite complicated and as it might reveal details…

Hi everyone. I'm currently with arista/untangle & thinking on switching over to sophos xg. I have some questions though about the firewall. One thing i use quite a bit with arista is their content filtering (which is why i'm not going to go with pfsense…

Hi Sophos Community, We're currently experiencing difficulties with Zoom calls after implementing Sophos XG Firewall rules and policies. Issue: Zoom calls encounter disruptions when our Sophos XG Firewall rules and policies are enabled. Disabling…

We get notify mails from our customer XGS 116 with SFOS 20 that mails are quarantined due to a detected virus (Malware 'Troj/MSIL-SSP,CXmail/MalPE-BP' detected and blocked) When looking at the device, I can't see any hint at the dashboard that a mail…

Hello community, recently we've encountered a problem with the e-mail quarantine on our sophos XG135 ( 19.5.1 MR-1-Build278) . Our XG is set up as e-mail gateway for our on-prem mail server and till about 3 days ago everything worked fine. Now…

I'm trying to figure out how the web proxy works. I configured a browser to use SFOSv20-IP:3128 I only want web access through the proxy, no proxy configured, no access. I've followed the example, with Web policy "Allow All" and Destination…

I'm moving from UTM to XG and are still in the "learning phase" to understand the new concept. Nevertheless, right now I'm absolutely desperate, because of outgoing emails (XG used as relay with SmartHost) are stuck in the "Mail spool" and I'm not able…

Hello, I come from Sophos UTM, now I am configuring an XGS series. I need to allow an external public IP address to access to SMTP replay. I tried to add the IP to Replay Settings - Allow relay from hosts/networks but it does not work. It seems that…

The thread was closed but I wanted to share my solution. Here is the original thread. https://community.sophos.com/sophos-xg-firewall/f/discussions/141624/can-t-get-eso-updater-to-work-as-exception-any-ideas Here was my solution. I created…

Hi, we migrated one month ago from Sophos UTM to Sophos XGS. We also migrated email protection settings succesfully. With one exception. With the old UTM we routed emails from Exhange Online directly to our internal Exchange Server. Now with the XGS…

Hello community, Do you know is there any way to use Sophos Firewall Email protection in MTA mode for IPv6 SMTP/SMTPs traffic?

I blocked the adult and nudity category in my sophos xgs 2100 firewall. But still many porn sites are accessible. Is there any way to block it completely?

Explain like I'm 5 (maybe a 5 year old is smarter at this point, who knows)... We have SSL/TLS inspection rules under "Rules and policies." One of these rules is the built in "Exclusions by Website, which references both a Local and Managed TLS exclusion…

The WAF custom authentication form in the documentation is not that clear and required several rounds of testing to fix. Below I've added code that is easier to modify and quickly get up to speed without 30 minutes of troubleshooting and testing. I…

Hello, I have trouble configuring WAF rule for one specific web server/service When I try to access service from inside on my pc I get 403 [Sun Jan 07 19:40:08.983664 2024] [authz_core:error] [pid 22769:tid 140041007253248] [client 10.2.1.10:52039…

Hello, I have a Peplink WAN gateway and a Sophos in the centre for routing from the core switch to the WAN.I have a problem: I cannot perform a waf for my webserver, which is hosted by peplink and the server are located at dmz, and my website is already…

want to unblock translate.google.co.in for all in xgs 2100

Hi, are SOFS and SG UTM affected by CVE-2023-51766 (Sender Spoofing by SMTP)?

When selecting a Web policy or an App policy from a drop-down list, there is a "None" option and also an "Allow all" option. If you select "None," doesn't that mean the same thing as "Allow all"?

We installed a Sophos virtual appliance in bridge mode in front of a pfsense firewall in order to intercept all traffic within the LAN infrastructure of our network for reporting purposes. This is what our current topology looks like: LAN --> sophos…