• Sophos XG API / Lets Encrypt / PowerShell 7 / WAF Update

    nplm85
    nplm85
    Hopefully this can help others. I'm running the home licensed version and just recently moved to v19 I have a few WAF's that are configured externally this script is to do the following. Renew Multiple certificates that are already configured…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Exchange / WAF - OWA, ActiveSync 1MB File Limit - SFOS 19 GA

    FFin
    FFin
    I'm getting following error in WAF-log: ModSecurity: Request body no files data length is larger than the configured limit (1048576) Is there a new switch in gui or command line to increase 1 MB limit in V19? There were forum posts some years and…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF issue

    lauwiks Cutman
    lauwiks Cutman
    Hello everyone , I have a problem with my WAF rules. It no longer works, the problem happened all of a sudden without me changing anything on my configuration. Only forward port rules work correctly. I have already rebooted my router. I even deleted…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF access via B2B (with NAT) not working

    NateP
    NateP
    Discovered a scenario that I can't get working in Azure, which seems like a limitation on the XG. We setup a policy-based VPN to one of our customers which needs to access one of our web-apps. The customer requires that RFC-1918 is not used in VPN traffic…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • How to fix error: "Following domain(s) will not be covered by selected HTTPS certificate."

    Paul McGinnie
    Paul McGinnie
    I am trying to get my ActiveSync setup to work across my Sophos XG 18.5.3 MR-3 install. I follow the recipe found at https://support.sophos.com/support/s/article/KB-000040209?language=en_US When I try to save the firewall rule mentioned towards the…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Websocket request not passing through WAF HTTPS traffic

    Jason Roble
    Jason Roble
    We have a web server that sends websocket requests when being accessed. We are able to make it work through HTTP traffic, but when we got an SSL certificate to make it HTTPS, the websocket requests fails. I have tried using Path-Specific Routing to…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF Rewrite HTML option disables javascript

    ChriZathens
    ChriZathens
    Hello guys. I am using waf and I noticed that when Rewrite HTML is checked javascript is not loading. For example I have a phpsysinfo script running. When I access it, while it is supposed to use bootstrap to display the page, it redirects me to the…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Add server across site-to-site VPN to Protected web servers

    djb-sophos
    djb-sophos
    We have a Sophos 18.5 firewall. Behind this we have two identical servers (WEB01 & WEB05) running a website. In the WAF rule, I can toggle between the two servers in the "Protected Servers" Web server list just fine and the website continues to work.…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Webserver protection with "nocanon" option required for matrix-synapse

    EdmundSackbauer
    EdmundSackbauer
    Dear Sophos, I am operating a matrix.org synapse backend, and for federation to work properly it is important that the apache virtual host is configured with the "nocanon" option. My assumption: Normally, mod_proxy will canonicalise ProxyPassed URLs…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Toggle web server in WAF rule via API

    djb-sophos
    djb-sophos
    Hello, I am trying to set up kind of a "blue-green" deployment environment for our website. We already have a working web server and a firewall (WAF) rule pointing to this web server. I've added a second "web server" and I now see it in the list under…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • publish two web server app using two IP publique

    Hamidi My abdellah
    Hamidi My abdellah
    I have two public IP addresses behind a sophos XG, I need to publish two web servers in the DMZ zone. I created the publishing rules for both servers. only access to web server 1 is allowed from IP1 address. access to web server 2 from IP2 address is…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Too many logs in WAF

    Service Informatique2
    Service Informatique2
    Hello eveyrone, I have created a WAF rule on all my Website, which is in "moitor" mode : I went to reverseproxy.log to see if I had errors, warning... and I have many many logs like : [cookie:error] [form_hardening:error] [security2:error…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Block specify IP to a specify path WAF

    Service Informatique2
    Service Informatique2
    Hello, I would like to do this : Allow all internet v4 IP on www.mywebsite.fr Allow specify IP on www.mywebsite.fr/admin Is it possible with Sophos XG 18 ? Thank you very much.
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Using WAF with servers own certificate?

    Syl4r
    Syl4r
    It seems that it is impossible to create WAF rules for web servers with https so that the web server would use its own certificate instead of cert from the firewall. Is it really so and is there any trick going around this problem?
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Web Server with HTTPS encryption showing different responses from both internal and external network

    Jason Roble
    Jason Roble
    We have a new SSL certificate installed in Sophos for a website we are hosting. When I configure the web server with an HTTP encryption, there is no issue. But when I change it to HTTPS encryption, these are the issues we are having: From internal network…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Bad request

    Svigelj Levi1
    Svigelj Levi1
    Hello! We are using sophos Web Server Protection to proxy our websites, One of our editors is suffering from this error: Sometimes get this message after 2 mins of usage, sometimes 15-30 mins, after this tried to flush all caches (10x times a day!)…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Size of a request header

    Petr Dimmer
    Petr Dimmer
    We have XGS3100 and in one web application, the following error is displayed in the browser when passing credentials: Bad Request Your browser sent a request that this server could not understand. Size of a request header field exceeds server limit…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF: No web server configured

    Bill Ditter
    Bill Ditter
    I have a fresh install of Sophos XG Firewall Home (SFOS 18.5.2 MR-2-Build380) Everything is working except I can not get the WAF to recognize that I have created as web server. I created a host in Host and Services ! created a web Server in Web…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Webserver with public IP not accessible

    superfun2k22
    superfun2k22
    Hi, I have one problem with my webserver. It´s an VM, with only a public IP, so no internal private IP, that it can be translated to. I set up firewall XG from ground, since I was expecting problems with one VLAN, that wasn´t accessable anymore, even…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • How to easy update a certificate that is used in WAF?

    Björn Bendix
    Björn Bendix
    Hello, Is there a way to update a certificate that is used in WAF Rules without touching every WAF rule?
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF configuration really working for recent Exchange(2016/2019)/RD Gateway (2016/2019/2022)

    Christophe Chesneau1
    Christophe Chesneau1
    Hello, Does the Sophos XG/XGS WAF (18.5) really work with recent Exchange and RD Gateway (2016/2019/2022) ? I have searched in community, in manuals, all over the internet, but I didn't find any "clear" answer, article or procedure with a WAF configuration…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF Issue. Error during SSL handshake

    Ahmad
    Ahmad
    hi, i am configuring WAF , so that server which is behind the firewall woudl be access over interner securely. i configured WAF, getting following error Proxy Error The proxy server could not handle the request. Reason: Error during SSL handshake…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF with radius authentication and Duo proxy problem

    Mark Fisher1
    Mark Fisher1
    Hi all, I have the exact problem as described by this member below. Basically, I have the radius and duo authentication proxy working fine for the user portal and SSL VPN but it won't work with WAF. The WAF authentication form seems to send multiple…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Domestic HTTP Traffic Redirect to HTTPS

    Muhanad Abdullah
    Muhanad Abdullah
    Hello all I need to reidrect all external HTTP traffic into HTTPS traffic before it reaches the clients. this need to be done without the need of any action needed from the clients side. is this feasible ? and do we need to purchase an SSL certificate…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WAF log after pentestig

    Service Informatique2
    Service Informatique2
    Hello, We did a Pentesting for 5 days on your Website which are behind XG WAF Firewall. In the firewall rule, Advanced, Protection, We create a protection policy with is in Monitor Mode So now I would like to see if we have log of the Pentesting…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>