• XG v18 captive portal appears after a few days with Match known users disabled

    Lewis Brand
    Lewis Brand
    Hello! Hoping someone has seen this before and has found a solution. I am running XG firewall home version SFOS 18.0.4 MR-4 on a home network. I have a basic LAN to WAN firewall rule with #Standard LAN Policy applied to it and Match known users unchecked…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • NET::ERR_CERT_AUTHORITY_INVALID

    Alex Santiago
    Alex Santiago
    Good morning, some images from the site are not showing. Could anyone help? Attached are some prints.
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Web Filtering remains active even when disabled

    Michael Traner
    Michael Traner
    Hello All, This is a repost of an unsolved problem from the Sophos subreddit ( www.reddit.com/.../) , so if it looks familiar that's why. I'm running Sophos XG SFOS 18.0.4 MR-4 and running into issues with web filtering. In short, the category "IP…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Web authentication for servers

    ecar13
    ecar13
    New XG deployment (SFOS 18.0.4). I created a few web policies so that we can control what websites authenticated users can go to. Seems to work fine. I have about a dozen servers (some linux but most Windows) that run Services. The services will run…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • IPSec between XG and SG - question about KB000036746 - really 128bit and MD5?

    LHerzog
    LHerzog
    Hi, I have a question about Sophos KB 000036746 I received this link from support in case 03251728 without any more information. Are the shown and red marked settings on XG policy really required in this way or is it just an example? I ask because…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Web Access to non-standard ports

    Andy C
    Andy C
    We have a new XG running as a direct Proxy I have 2 sites I cannot access and non standard ports e.g. https://x.x.x:5601 and https://x.x.x:8182 I get the generic "Hmmm… can't reach this page" from Edge. The ports are allowed in Web proxy configuration…
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Block sub URL XG Firewall

    Andy C
    Andy C
    I want to specifically block a sub URL https://app.powerbi.com/groups/me/getdata but nothing else under app.powerbi.com . I've done this by creating a Category and adding Domain/keyword as app.powerbi.com/groups/me/getdata If I go to https://app.powerbi…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • DPI SSL/TLS website alert

    lenyick
    lenyick
    I am just now switching over from using the web proxy to DPI engine and i am having one issue where the only site that wont load on IOS Devices is www.youtube.com getting (TLS handshake fatal alert: inappropriate fallback(86).) using safari browser…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Wild Card Blocking/Filtering?

    yesandno
    yesandno
    Hi everyone, How and where do I enable wildcard blocking? I want to block all the stupid, ",io" TLD's among others. Something like this; https?://[A-Za-z0-9.-]*\.io/ just not sure where to put it. Thanks in advance!
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Creating a new Business Application Rule hangs the screen

    Brian Ladley
    Brian Ladley
    I need assistance with creating Business Application Rules for Exchange General and Exchange Autodiscover. I can create User/Network Rules without freezing the screen but when I choose the option for Business Application Rule, it gives the list to choose…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • How to block web radio

    Jelle
    Jelle
    I currently see a live connection running since early in the morning based on HTTP Resume Filetransfer. Investigating the destination IP address I found out it is web radio (http://94.130.253.194/). How can I block web radio? - I don't want to block…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Country block - Does it work on SFOS 17.1.2 MR-2

    itguy318
    itguy318
    I have created a firewall rule to block traffic from certain countries. I am on the latest XG version SFOS 17.1.2 MR-2 I followed the knowledge base article https://community.sophos.com/kb/en-us/123007 Are these settings and article valid. Thanks
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Add DNS to separate SSL VPN profile

    lara20
    lara20
    I have a SSL vpn profile (PROFILE 1) through which majority of my users login remotely if required to access the LAN For a small group of contractors i have created a separate SSL VPN profile (PROFILE 2), so they have access only to 1 resource (SERVER…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG Hyper-V VM as a filtering device

    Bill Lohrer
    Bill Lohrer
    I know this has been asked before, and I have read several posts about how to do it, but I am just not getting it to work. I have installed the Sophos XG Hyper-V appliance. I have another firewall product that is replacing my XG that I had installed…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • How to configure Sophos for Securing IoT devices?

    Deepak Verma
    Deepak Verma
    Hi, As Sophos does not have the option to configure policies based on device type so How will configure my IoT devices security? I have many devices which are connected to office LAN network but I don't want to give internet permission to some special…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Unable to view youtube videos via previews or links, but works on youtube.com

    tomrgsd
    tomrgsd
    Using SFOS 17.1.0 GA on XG 650. We have Safesearch enabled and if a user that is allowed goes to youtube, they can search and view videos as expected. When that same user and same computer tries to watch a video that may be embedded, redirected or even…
    • Answered
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • How to Import Spamhaus DROP live IP list and block on firewall

    Deepak Verma
    Deepak Verma
    Hi, I want to block some WAN IPs (LAN to WAN & WAN to LAN) on the Sophos firewall but the issue is that this is a third party live list in text format ( myip.ms/.../latest_blacklist.txt). It will auto update. How will I import this txt list on the…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Security Configuration for Chrome OS

    Deepak Verma
    Deepak Verma
    Hi, We are planning for a big network (2500 Chrome OS Users) and I am asking a simple question about IPS configuration for the Chrome OS policies. There is no specific IPS signature for the Chrome OS in the XG firewall IPS (I didn't find on another…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Routing from WAN to LAN - Some help needed

    Jimmy Le man
    Jimmy Le man
    Hello everybody, I need some help here. I recently migrated from pfSense to Sophos XG home and I really like it, but I have some trouble getting my routing configured. Basically I want to configure remote access to my media servers. What I did is…
    • Answered
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Smtp enable on XG firewall

    sindbad
    sindbad
    Hi all, I want to enable SMTP on the XG firewall. I opened the service SMTP from LAN to WAN I did a telnet and it's still not open. Am I missing something? Would love to hear from you. Thank you Regards
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Traffic shaping for just 1 client

    itguy318
    itguy318
    We have an existing traffic shaping policy for all users on the network. Now i want to create an additional rule for just 1 client to minimize the bandwidth for that client. I have followed https://community.sophos.com/kb/en-us/123059 This new user…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • SSL VPN cannot access internal network other than LAN?

    ITMgr
    ITMgr
    I have a XG 210 firewall appliance. I have a SSL VPN (Remote Access) policy for connecting to my internal Office LAN, and it works great. From the SSL VPN client, I can ping devices on my internal Office LAN, get to network shares, and run applications…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Web access policy fails if tech support runs an application as an admin on user's PC

    A B6
    A B6
    Hello guys, We have implemented STAS authentication in our environment. Our web policy provides Tech support employees access to browse video hosting websites e.g Youtube, but the same category has been blocked for other people. When some non tech support…
    • Answered
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Web Server configuration.

    John Henry Vindas Carballo
    John Henry Vindas Carballo
    Hello all, I've been looking for information about the correct way to use the web server module on XG but I couldn't find anything. Also ask to a Live support agent on chat and he didn't have any document that could help me. So, what I want to know…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Avaya IP Office Small Community Networking Traffic

    Adam Spooner
    Adam Spooner
    I am working on switching from Checkpoint firewalls to Sophos and am having some issues getting our Avaya IP Office phone system to work across our VPN tunnel to a remote location. All of the documentation from Avaya is that packet inspection needs to…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
>