Hi, I’m struggling to find documentation about how Active Directory SSO operates (as opposed to how to set it up). The kind of questions I have are… Is the initial browser authentication transparent, or does the captive portal appear for login? …

Hello all, I currently have a XG firewall (FW-1), connected through IPSEC tunnel with another (FW-2). FW-1 has two LAN zones (LAN-A and LAN-B), both allowed through the IPSEC tunnel. FW-1 sends log messages (originated from the firewall itself…

I have a question about SSL VPN auto connect. Can the user receive an automatic connection to the SSL VPN after restarting their computer and connecting to the internet?

Hi, We have a RED 20 device that we recently purchased as a test device before looking to set multiple up across different sites, however we have found that our organisation's manual proxy blocks any internet access to anything not included in the proxy…

I have configured sophos xgs 107w firewall but i want to view users which are connected through wireless ssid

I have a question regarding updating a HA setup from Firmware SFOS 19.5.3 MR-3-Build652 to SFOS 20.0.2 MR2-Build378. Since this is an update to a different version, does the same principle apply here where the Auxiliary is updated first, followed by the…

hi i disabled secure boot and then did a fresh install on an nvme drive it stucks on boot "booting 21_0_0_169" any info or help appreciated thanks

I need some assistance please. Also i am new here, in the community. My ipsec remote access sends traffic but does not receive. See the screenshots of my configuration:

I have a HA cluster where it happens now second time that the Aux node was not able to join the cluster or went into fault state after a time of Primary node being down. First it happened while HA initial setup. LuCar Toni fixed it via remote access…

Good evening, I got an old Sophos XG86w that is out of support, the status LED often shows an error (red). Otherwise it is running properly so far. This also happens in the BIOS, i.e. OS has not yet started, so the BIOS of the XG86w seems to find an…

Firewall is able to reach Sophos licensing system https://eu-prod-utm.soa.sophos.com in manual setup wizard That no NTP server enabled per default flaw should be fixed quickly. XGS136_XN02_SFOS 21.0.0 GA-Build169# date Thu Jan 1 01:16:05 BST…

we face a problem wtih XGS 4300 Performance , and becomes to red , the internet speed decreasing ,we resolving the issue after rebooting the device, what should be done to solve this where this accruing contentiously

There's a thread from two years ago about provisioning HA-Cluster using Sophos Central ( Lite-Touch provisioning HA-Cluster ) The text is still (or again) showing in central and in documentation ( https://docs.sophos.com/nsg/sophos-firewall/21.0/help…

Hi everyone, We have an IPsec site-to-site VPN connection between our Sophos and Fortigate devices. Currently, both the gateway and tunnel are UP and functioning properly. VLAN 10 and VLAN 20 are included in the local subnet configuration on the Sophos…

Hi all, I have several SFOS V20 in place. I can nomore add an ip network: "You must enter a network IP address." There is not much room for making things wrong and I did this couple of times before. No problem to add an ip host but no chance for…

What is everyone's experience with WAN link load balancing in v20? We're a K12 private school with two identical WAN links from different ISPs, Frontier and Comcast. Our goal is to enable WAN link load balancing in an active-active config, weight 1 and…

Hi i want to ask the configuration of (WAF) regarding customer request to enable an additional port, specifically port 11883.HTTPS is currently enabled and functioning without issues. To accommodate the client’s request for port 11883, I have created…

We have a /29 subnet from our ISP. I want to use a dedicated public address for our guest network traffic. I've added an alias on the PPPoE port and thought I could then just use an SD-WAN rule to route the traffic, but the alias doesn't appear in the…

Very nice! I need help setting up an IPsec tunnel between sites, the firewall models are "UTM - SG135, Firmware 9.719-3" and "XGS2100 - Firmware (SFOS 20.0.0 GA-Build222)". We have researched through forums and followed some steps that match the errors…

I am referencing this documentation https://docs.sophos.com/nsg/sophos-firewall/19.5/API/SYSTEM/Host%20and%20Services/IPHost/operations/AddIPHost&EditIPHost.html There's information on how to add or update an existing IP host object. However, I just want…

implementing vpn site to site connection, causes problems with ip telephony, when starting the connection or disabling the connection causes my voip phones to start disconnecting from the pbx. once the connection is established and having the vpn connected…

I need to log in to our router via SSH because the web console lacks the ability to disable SIP ALG. But when I try to login it claims my password is wrong - even though I just used it 2 minutes ago to access the web console. SSH is enabled for the…

Buen Día, Quisiera saber por qué al trata de acceder a la siguiente URL https://gala.com.pa/ no carga al realizar la petición desde cualquier segmento de red LAN. Se realizan pruebas: Permitiendo el dominio y la ip de la url Se agrega como…

SNAT with multiple WAN gateways isn't working.. WAN Gateway 1 = Port3 - its public with /27 worth of aliases WAN Gateway 2 = Port5 - its public with /28 worth of aliases (IP Host) SNAT with Port3 aliases work for all of the rules I've created…

I have TLS inspection setup on my main network running through a Sophos XG (20.0.2 MR-2) and am trying to setup Google Passkeys for G-Mail. The passkeys were setup using a different network connection, and they do work on another network. If I go through…