• Why does XG break oauth 2.0 connections?

    rfcat_vk
    rfcat_vk
    Hi folks, Before the upgrade the gmail account used user name and password, after the upgrade the username and password were disabled and oauth 2.0 was the approved security method. Today I upgraded my iPhone and iPad to the latest version of IoS…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Not able to access a website

    Shifna Nizar
    Shifna Nizar
    I am trying to access the website https://uae.tweb.ttfuel.com/v2/ . Its accessible outside the office network. But its not accessible inside the network. Its saying site can't be reached. I am using Sophos xg firewall and I am new to Sophos. I think firewall…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Web Policy

    Randhir Kumar
    Randhir Kumar
    Dear Support Team, Dear Support Team, I have Sophos Firewall XG330 (SFOS 20.0.0 GA-Build222) The Web policy is not working. when i blocked the https then all site all blocked. i checked the policy tester. its web policy is working. But when we open…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Understanding TLS Inspection and Valid Certificate Presentation: How Do Some Sites Avoid Appliance-Generated Certificates?

    Sophal Lee
    Sophal Lee
    I’ve noticed that some sites subjected to TLS inspection still present valid certificates from reputable CAs without generating on-the-fly appliance certificates. This behavior seems unusual because, typically, I would expect the appliance to generate…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Allow YouTube in a specific site only

    Anesu Dangarembwa
    Anesu Dangarembwa
    We have a learning website, that we want to allow YouTube access to. The website contains YouTube videos that we want to allow. But on the YouTube website we want to block YouTube access. Currently YouTube is being blocked with Application filtering.…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Policy dont work

    Alain Mirval
    Alain Mirval
    Hello everybody, I created a rule to prohibit the social network Facebook in Web then Policy, I applied it to a Host, I created a new firewall rule where I applied this, then activated.the rule does not work and facebook still works. How to make the…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Block inbound emails by email domain extension

    Nuno Mota
    Nuno Mota
    Hi, I would like to block inbound emails by email domain extension in my SOPHOS FIREWALL, for example: .ru .cn Now i'm blocking by the complete domain (*@domain.extension), but i would like to block by domain extension. Thanks Nuno Mo…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • web catergory

    Samuel Wahba
    Samuel Wahba
    Dear All i have this problem in pic i tried to close category (travel ) but as an execption i opened this site called (Tripadvisor) it opened but this is always the view ??? can u help me please ?? i hae to open the travel category to open normally…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Use web proxy instead of DPI engine enabled mysteriously XGS116

    Brennan Kostyniuk
    Brennan Kostyniuk
    We noticed that Microsoft Office was not updating, so we added the Microsoft Office exceptions as per Sophos Firewall: Configure web exceptions for Office 365. Next, we encountered an issue where Google Chrome wouldn't install, so we added the exceptions…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • question

    Samuel Wahba
    Samuel Wahba
    how can i block dawnload portable application?????
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • SSL/TLS inspection vs HSTS

    Digit23
    Digit23
    I have enabled SSL/TLS inspection to do MITM for HTTPS(443) trafic from LAN to WAN. I have push by GPO certificat CA to windows computer. That work just fine for most site. Now I have an issue with site that have HSTS enabled. For those site that enable…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • sophos XG and windows 10 & 11

    Giuseppe Lau
    Giuseppe Lau
    Hello Community,I would like to ask your help to fix a funny problem I have. All my PC are protected by Sophos Home (Primium Subscription) and I have a Sophos XG Home edition. In two PCs of my network I have 2 web sites that are not downloaded properly…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • SSL Inspection Error with Apple websites

    Corey Carpenter
    Corey Carpenter
    Hello, I am running SFOS 19.5.4 and I noticed that I cannot get to any secure apple.com website since the last update. I try to go to apple business manager (business.apple.com) and it will just spin and eventually time out. I also tried to purchase a…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS DPI Engine certificate warning

    admin_idl
    admin_idl
    Hello, We are using the DPI engine and have created SSL/TLS inspection rules. Unfortunately, we receive a certificate warning for some websites even though the firewall certificate has been imported. What could be the reason for this and how can we…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Best Whitelisting Method: Web Policies vs Firewall Rules

    iamroot
    iamroot
    Hello everyone, I'm trying to understand what the best or correct whitelisting method is. Scenario: I need to whitelist URLs for a new application. Method 1: Firewall Rule 1) Create FQDN Host: *.example.com 2) Create Firewall rule Source…
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Problem with NET::ERR_CERT_AUTHORITY_INVALID still present?

    Andrej Pirman
    Andrej Pirman
    Hi, I have ONE of 3 new installs of XGS-126 having long known problem with Sophos CA certificates on some popular URL addresses. For example, users cannot download Google Chrome: I guess problem is HSTS, where browser detects MITM, which is Sophos…
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Blocked Website

    WichF
    WichF
    Hello, currently I have a problem with my sophos XGS Firewall. I would like to allow a specific Website for our marketing department. tiktok.com I also add this site to "Allowed URLs for Default Policy" and "Local TLS exclusion list" but nothing happened…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • An error has occurred in resolving the URL, please update the URL and retry the policy test.

    n4shito
    n4shito
    Greetings community. I have an XGS126 device (SFOS 20.0.0 GA-Build222) I'm trying to do a policy test on google.com, facebook.com, and I get this message: An error has occurred in resolving the URL, please update the URL and retry the policy…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • FILT-APP Block Office365 SOPHOS XGS

    Mathieu Rojo
    Mathieu Rojo
    Hello, I have recently see my officesetup.exe installation blocked when I activated the app-filter based on this policy "Block generally unwanted apps" on my LAN TO WAN firewall rule. This blocked was manifest juste after launch the officesetup.exe…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • TLS Inspection | OCSP / CRL | Not blocking websites with revoked certificates

    Daniel Neto
    Daniel Neto
    Hi everyone, I'm enforcing my TLS inspection rules to more strict and secure with best practices. So my Decryption Profile: Using https://badssl.com/ for tests scenarios I had success in almost all practices: invalid date working as…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • captive portal without login

    Quallensaft
    Quallensaft
    Is there any way to implement a captive portal without any account or guest login? Just a disclaimer -> confirm -> web surfing allowed?
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Webfilter debian deb repositories "Malware 'Unscannable"

    LHerzog
    LHerzog
    We're having some strange issues currently only reported for debian repositories. When trying to download random files from there with browser or wget - the requests randomly seem to time out and / or users get a STOP message from the firewall. Sometimes…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Wifi Connected ICON shows offline

    LSG Admin-Venket
    LSG Admin-Venket
    Dear Team can anyone tell us which Web policy blocks or enabled the identification of wifi connected icon in the taskbar. We have to implement tight restriction in our environment due to the fact of education institution. But enabling the policy now…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Website Problem

    CreateShare
    CreateShare
    Hi, One of our users is continuously facing a problem with a website. After logging in to the website and using it for a little time, it starts showing "Wrong requested URL!" Page couldn't be found!. He tried using different browsers but same. Is…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Block search words in XGS2100 not working

    Junaid Farooqui
    Junaid Farooqui
    Dear all, For some reason the search block policy is not working. Attaching screenshots from categories, policies and firewall rule.
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>