Hello, I'm trying to find where in Central I can report on Changes made to XG firewalls over a period of time. I found this post where the response is " if you have a CFR-A subscription, then the logs can be found in Central ": View XG Firewall configuration…

Hi, We have a Sophos XGS107 firewall on a Spectrum cable internet connection. Yesterday mid-morning, we got a notification that the firewall had lost communication to Sophos Central. We called the location where the XGS107 is located and they were…

Hi! tonight the HA-Cluster disconnected from Central (not together: the AUX 1h later) and on the Firewall the following services are shown as "stopped": - fwcm-updaterd - fwcm-heartbeatd - fwcm-eventd - fwcm-api-execut By the way, only one of the two…

Hello, We are currently in the process of preparing around 60 XGS87w for one of our customers that they want to use in their sales outlets to secure and connect them. To speed up the process, we have stored a configuration template in Sophos Central…

I have several customers in Sophos Central who have firewalls registered and nothing else. One client has 23 firewalls registered. Sophos considers these customers as "not active" despite them having connected, active firewalls. About time Sophos…

Yes, i'm aware that this firmware release is already EOL - but that's why i'm upgrading. Logging in to SFOS 19.0 MR1 i got updates offered to 19.5MR4 and 20.0GA. I got those two Versions on local webadmin as well as in central. As both firmware versions…

hi due to a failing xg135 I am going to need to transfer the licence to a spare xgs136 soon but when i have found the info on how to do this it says go to the firewall licence page on sophos central and simple click transfer licence. The problem is…

Hello, I've recieved a request from a client asking to change the message from this notification whenever a user that is connected to the cabled network and changes to the Wi-Fi network. I'm not sure if the message is being sent by the Firewall…

We have remote users to connect to a Sophos SSLVPN. We then create the following filewall rule between them and the servers to ensure that they have Sophos AV installed and that there are no issues on either side. Unfortunately, when we do this, no-one…

Hi, i'm actually setting up Sophos Heartbeat on a Sophos XG135 (Cluster). We're using Sophos Intercept X and Sophos Connect (SSL-VPN) on our clients. My setup with heartbeat used in firewall rules at our HQ seems to work without any issues; but i…

when i applying a new subscription, and I'm receiving a "Failed to Apply Subscription" message.

In the Sophos Central Report Generator (IPS Report Template), there is a column for Log Subtype we noticed that most of the values are "drop" however there are a few rows with values "detect". Does this mean did Sophos IPS allowed this traffic? If ever…

Hi Ok so I might be rather dim (and I hope not as I am supposedly a certified SFOS Architect!) but we are deploying a 10 SD-WAN site to site mesh of XGS firewalls with multiple WAN links into each site for a customer using SD-WAN Central Orchestration…

Hi, We oversee more than 30 firewalls through Central Firewall Management. Although a firewall policy has been applied universally, a problem arises with password complexity settings within the policy. Specifically, it restricts passwords to a range…

Hello Guys, just wanted a confirmation from you, i've registered some AP in Sophos central but they arent shown in the XG firewall, is that normal? the only way to manage those with the xg firewall is to register them with the XG? i tought that…

Hi all, XG Firewall XGS Firewall I have around twenty Sophos firewalls Each time I open an admin session, a notification from Sophos Central is displayed. I want to know is this service free, and does not require any subscription.. what are the…

I've built out in the SD-WAN connection group. XGS116 firewall at my remote home office is behind DHCP public IP. Virtual firewall in Azure is behind Azure's NAT. It doesn't seem like an SD-WAN Connection group can handle this as it configures the Gateway…

Good Day Members, I Trust you are well. We currently have 5 sites with site to site SSL VPN configured. We are investigating SD-WAN connection Group in Sophos Central. This will assist us in setting a couple defaults policies that that would be the same…

Hello, where are the Firewall Rule Groups in Central? I am not able to group the rules, how is this done via Central? Sven

When Searching Object for a Firewall rule, I have to know the name. example vsrv-testserver01 When I type testserver it is not found. I have to start with vsrv-. This works on an xgs. Sven

Hello, for Firewall Rules with Users, managed by Sophos Central Firewall Management. How do I get the Groups to Central and use them? The Groups are synced from local Active Directory. Thanks Sven

Is there any way to create a policy so hosts that are not in compliance cannot access the internal network? Example: If the host does not have AV and CrowdStrike installed and active, access to the internal network or VPN is not allowed, therefore,…

We have a rule that is configured with heartbeat like this: A device had heartbeat days ago but currently has no heartbeat. XG430_WP02_SFOS 19.5.3 MR-3-Build652 HA-Primary# ipset -L hb_green |grep 172.16.xxx.xxx XG430_WP02_SFOS 19.5.3 MR-3-Build652…

One of the XG115W firewalls lost connection to Sophos Central some time ago, rebooting device did not solve the issue so I've tried to remove and re-add the device to Sophos central. Whether I try OTP or user/password it errors. Now the button is not…

Hi team, I noticed a strange thing about our own XGS-HA cluster today. One device wasn't checked in in Central (status "Auxiliary device status: Couldn't get the registration details. The device is offline.") although the HA status page shows everything…