I am trying to host Emby server behind WAF with HTTPS configured. I am able to access the server successfully, but when it comes to playback, it doesn't want to start playing. It will seem like it's buffering, with an image of loading, but never starts…

Hey there, I´m trying to publish a RD Web Gateway with a Sophos XG and WAF. Configured anything like described here . Login and the RD Web Overview works, but not the Conenction to the RDS. For testing I habe disabled the entire protection section…

Hello everyone, Me and also a friend have the same issue with a waf rule. We both have a cloudflare proxied domain name (lets say system.somedns.com) that points to our wan IP. Since it's cloudflare proxied, the ip of the domain name points to cloudflare…

Hi community, we've experienced again the problem that sending e-mails with attachements bigger than 1MB are blocked by WAF. We had this problem about two years ago and already set the limits via advanced shell. We did the same thing as described in…

Hello experts I am struggling to get a Docker container of vaultwarden up and running in my internal network. Since vaultwarden has limited support for HTTPS, I tried to use XG as reverse proxy, but I cannot connect. I assume, it is irrelevant for the…

Hello Is it possible to use a group of IP addresses in a WAF rule exception? Adding many IP hosts one by one is very cumbersome.

Hi all, I'm having trouble uploading various .iso files (>2.5GB) while "Common Threat Filter" is enabled in WAF. - no error within reverseproxy.log - no problems with a 860MB .tgz file. - different browsers or client devices Some ideas where…

Hi everyone, I see a lot comments at this forum where I can see, that sharing Port 443 TCP for WAF and SSL VPN is working. The documentation says, that it is not possible: https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp…

i have a iis webserver that are publish to the web at the port 80. it reponding to url1.mydomain.com created a webser in XG230 and the nat rules for it. Now i have the need to add a second webserver but this one wil respond to url2.mydomain.com…

Hi all, I am publishing wordpress server with XG. Is there any experience to disable the /wp-admin subpage to internet. It will be enough for us to access that page internally. Thanks for hints Gernot

I have noticed, that recently the WAF & E-Mail Features are disappeared in the Firewall Sizing Calculator. So my customer thought to buy a Sophos Firewall, but we are not sure, if the WAF is near EoL, like the E-Mail Module where Sophos forces you…

I have to create a user with username equal to mailadrres ( name@domin.com ) Purpose is to use this user to authenticate with a login form with passthrough in a WAF rule. When i try to authenticate nothing happens, when i authenticate with a username…

We have an XG310. We are currently migrating our Exchange server from 2013 to 2019. I am trying to figure out how to change our firewall rule for OWA to point to the new server. I go under "Rules and policies", IPv4 and we have a rule created for OWA…

Hello Community, my name is David Lorenz and i have a problem with the WAF from our customer. They use Exchange 2019 on prem. and users from a branch office in egypt have connectionproblems. I already have set some exclusions in the rules because…

Hello everyone I have a Synology NAS behind a Sophos firewall (WAF). On this server is Synology Drive which provides a Cloud Infrastructure. Sadly I cannot upload anything over 1 GB which is problematic. Internally without the WAF it works. The issue…

I am new to Sophos firewall, I just deployed a virtual Sophos XG firewall in an Azure virtual machine. Now I want to protect my webserver which is hosted on GoDaddy with the firewall's web server protection, Is it possible and if it is how do i go about…

Hello. I want to open Emby for external access. I want to put this on WAF. Emby is run on docker container. I want to be able to access it via https://stream.test.com , can this be done? To be able to use https, will generating a cert for stream.test…

Hello, once enebaled the following option reverse proxy does not work anymore. Cookie signing URLHardening tailf /log/reverseproxy.log [Mon Feb 06 22:15:41.552601 2023] [core:warn] [pid 13179:tid 140605555216064] AH00111: Config variable ${URLHardening_HTTP_Hostname…

Sophos FW v19.0.1 (Build 365) - With a Home LIcence Since upgrading to this version, I have had to WAF functionality, and there are no errors being shown in WebAdmin Going into the shell and looking at /logreverseproxy.log I can see the following: …

Good day everyone, I am having challenges enabling WAF. The website is using http and on normal dnat its accessible. The moment I create a WAF with HTTPS and disable dnat rules, i get a 403 forbidden error. May you kindly assist. Regards, …

Hello Sophos Community Using the latest firmware as of today (SFOS 19.5.0 GA-Build197) on Sophos Firewall, installed as a virtual appliance in Proxmox 7.3-4. It's a home license, on 4 virtual CPUs (host), and 6GB memory. I'm using the official qcow2…

Hi, I tried to configure a WAF rule that is using Port 8090, but on save I get the error message, that port 8090 is already in use. This is the Captive Portal Port. Is there any way to change Captive Portal Port or is there any solution to use it…

Hi, i wish you all a happy new year, since we started using XGS2100 appliances with version SFOS 19.0.1 MR-1-Build365, have we noted some problem like Auto discover is blocked. i am trying to call the auto discover service but web application…

EDIT: Problem solved. You cant limit anyhow Source for specific country without problems on SophosXG - my problem was NAT, if you'll setup NAT then such source will be excluded from any malware scanning, logging etc. We must wait 'till Sophos Team will…

Im trying to find an explanation about metioned topics. But i cant find it in documentatnion, can someone point me where to Sophos is explaing it?