• Using the firewall as a web proxy.

    Jason Black
    Jason Black
    I want to configure my Sophos Firewall so that only Firefox can access the internet from a PC, and all traffic must go through the Sophos explicit web proxy (configured on port 3128). Direct HTTP/HTTPS traffic from the PC should be blocked entirely. …
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • SSL VPN Client not connecting Immediately after Installation

    eFrancis
    eFrancis
    The SSL VPN client is not connecting immediately after installation and returns the error below We have just uninstalled the previous version of SSL client and re-installed the above. The last time a colleague installed a fresh OS on their machine, the…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS add Radius

    admin_idl
    admin_idl
    Hello, We want to add a Radius Server on the XGS. Which entry must be stored for the item ‘Groupe Name Attribute’? Where can I find this attribute on the Radius Server? Thank You!
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • When will Sophos Firewall support Intel i226-V 2.5G

    jspanitz
    jspanitz
    Exactly the same question as the thread here RE: Does Sophos support Intel i226-V 2.5G? Except I would like to know then this support will be introduced as these nics have been out forever and linux kernel fully supports now as well.
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Veeam Guest Interaction Proxy creates false IPS Alerts

    Peter Riederer
    Peter Riederer
    Hey, after deploying our new XGS3300 with SFOS v21 we noticed several IPS Alerts which are created from a Veeam Guest Interaction Proxy to the Veeam Backup Server: Attack : FILE-OTHER Adobe Premier Pro ibfs32.dll dll-load exploit attempt Attacker: Guest…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Invalid Traffic / Invalid TCP state (no routing issue)

    Gerhard Sauer
    Gerhard Sauer
    Hello, I have a problem with mainly HTTPS connections showing up in the log as Invalid Traffic / Invalid TCP state. See screenshots below. example domain is https://telekom.de I have 2 Internet connections with separate NAT and SD-WAN routes. Routing…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • VPN traffic is not passing through the vpn tunnel

    Anesu Dangarembwa
    Anesu Dangarembwa
    Good day l have create a site to site to vpn , the vpn is up , but we cannot ping the branch site On the head office there is ospf configured, and if we trace route from the firewall it's showing that the traffic is going through the ospf vpn of…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • [Feature request] 802.1p support for PPPoE/VLAN interfaces

    Samuel Leal
    Samuel Leal
    Hello, I'm seeing more and more ISPs asking for CPE P-bit setting for their connections. As far as i know, Sophos Firewalls still doesn't support this forcing us to use a bridged router supporting this feature in front of the Sophos FW. Please consider…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • ips.log filling at high rate - normal and good for the SSD lifetime?

    LHerzog
    LHerzog
    Today we've had a partial outage due to high /var partition usage. It was flapping between 70% and over 90% in a short time. /dev/var 179.3G 138.6G 40.7G 77% /var /dev/var 179.3G 138.8G 40.5G 77% /var /dev/var 179.3G 138.9G 40.4G 77% /var /dev/var…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Sophos FW has stopped opening on Chrome Web Browser

    eFrancis
    eFrancis
    Sophos FW for Production has failed to open on Google Web Browser however the IP is reachable. Version: XGS4500 (SFOS 20.0.0 GA-Build222) Mode: HA Any solution towards that. Thank you
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Open port 123 for Ubiquiti NTP access

    MCBLC
    MCBLC
    Hi all, I have a XG135 firewall and several RED devices, I also have several devices from Ubiquiti (UNVR and CloudKeys) and they are causing problems. Ubiquiti support keeps telling me that I need to allow access on UDP port 123 which they use for NTP…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Device names are in form of serial numbers. Can I change this?

    Andrej Pirman
    Andrej Pirman
    Hi, I am exploring Sophos CENTRAL now with a bunch of XGS firewalls and Intercept-X installations and one thing that bothers me a lot is that firewalls in logs, alarms, events and such are all named by SERIAL NUMBER. Like in example below. It is really…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Verbindung zu Sophos XG von Linux Server ... HowTo gesucht

    mipo
    mipo
    Hallo zusammen, ich möchte von einem Linux Server, der sich im Internet befindet, eine VPN Verbindung (SSL oder IPSec) zu meiner Sophox XG Firewall herstellen. Bisher wurde der sich im LAN befindliche SFTP Server (Telefonanlage) über einen dedizierten…
    • 1 month ago
    • Sophos Firewall
    • German Forum
  • Issue with Third-Party Threat Feed Not Blocking WAN to LAN Traffic

    Jurgens Steyn
    Jurgens Steyn
    Hi, I’m using a third-party threat feed with Sophos and under the impression that it should provide WAN to LAN protection. However, I’ve conducted a test and observed unexpected behavior. Here’s what I did: Created a custom text file list containing…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • WAF with the webserver hosted in Azure

    Dominik Friedl
    Dominik Friedl
    Hello, we have a VPN-tunnel from our XG330 (SFOS 20.0.2 MR-2) to Azure and want to host a web application in azure. The VPN Tunnel was done via the configuration file and is route based, with the xfrm interfaces being in the169.254.0.0/30 subnet…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Talos feed in v21

    MikeyS
    MikeyS
    Noticed a change in the Talos / Snort blocklist from the website. Reason I looked further is I can't get the list to update on the Sophos v21 feeds and this would make sense. Also noting that it no longer works on a pfsense instance I have. "Thursday…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Strange behavior after update

    Foraco Brasil
    Foraco Brasil
    We have an XGS116 firewall and after updating to the SFOS 20.0.2 MR2-Build 378 I can no longer log in to the admin web portal, only login failure. Even trying to access via SSH when you can log in, navigation between the options is extremely slow and…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS4300 - WAN Interface not pinging

    Stephen BabuJohnson
    Stephen BabuJohnson
    Dear all, I am facing a problem that my WAN Port always showing RED and i could not ping the WAN Gateway. At the same time, the same line with the same Static ip address is working in my laptop / nearby desktop without any problem. Kindly let…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Dienste über SSLVPN nicht erreichbar

    leo leo
    leo leo
    Hallo zusammen, Wir nutzen momentan XGS2100 (SFOS 21.0.0 GA-Build169) ich habe bemerkt, dass wir einige Dienste durch SSLVPN nicht erreichbar haben. Z.B wir haben ein Programm/Link, was wir Intern ganz normal nutzen kann aber über VPN geht nicht…
    • 1 month ago
    • Sophos Firewall
    • German Forum
  • New Install - Looking for user/group organization guidance

    Marvin Hamm
    Marvin Hamm
    We're a rural school, 200 students. Grade 5-12 all have a device, as do teachers. K-4's have access to a iPad cart. We just moved out of our UTM and into a XGS 2100. (4 - AX320 on the firewall, 4 - AP55 on Central) Our WIFI setup was never quite ideal…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Restrict SSL VPN to WAN Alias

    Brennan Kostyniuk
    Brennan Kostyniuk
    I'm trying to configure an SSL VPN. Our WAN subnet has 5 IP addresses, with 4 aliases set up for the additional IPs: Port2 Port2:0 Port2:1 Port2:2 Port2:3 Currently, I have a web server running on Port2:0 . I want the SSL VPN to run…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • SSLVPN login issue always logout

    mitssupport mit
    mitssupport mit
    Hi, Every month, when users change their Windows password, the VPN credentials do not update automatically. On the administration side, we have to delete the User, purge the AD users, and re-register them again. We have already tried setting the …
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Sophos XG Alias Interface not showing up, SFOS 21

    dmuller
    dmuller
    Hi all, I created a new alias interface but missed on digit, so the address doesn´t belong to a existing interface configuration. Now I cant delete that alias because its not showing up in gui. Is there a way do get rid of that alias via console?
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS v20.0.2 - Heartbeat service dead - Decryption of passphrase is failed

    Jens Frankiewicz
    Jens Frankiewicz
    Hello, we performed a firewall migration from an XG450 model to the XGS4500 model last weekend. The firewalls are in a HA configuration. The migration process worked seamlessly. The primary firewall is working with no issue, all services started. To…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS Delete a group imported from the AD

    admin_idl
    admin_idl
    Hello everyone, We have imported groups from the AD on the XGS and now wanted to tidy up a bit and remove various AD groups from the firewall again. When trying to delete the groups we get the message: Thank You!
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>