Hello, We have a protection Policy for the NextCloud on Sophos, unfortunetly we have many issues with uploading Photo (many times the upload not working at all what ever is the Photo size or extantion ), every time we must connct to SSH to check the…

I have two internet connections from two different ISPs. Let one be called X and the other be called Y. X and Y are separately connected to a firewall. I use X actively. I want Y to be active when X loses internet connection. Then, when X internet connection…

Does the order of Sophos UTM "Network Protection" firewall rules matter at all?!?!?! On my sophos utm, the "Network Protection" firewall rules are as follows (summarizing) Top Rule = deny PrivateIP#1... any protocol... to any external ip (block…

I have a couple of UTM clusters that each has more than 200 firewall rules, and I want to load them in excel to make a traffic matrix. The firewalls are managed by SUM but I didn’t find a way to export the rules to a file. While it's possible to do…

Hello everyone, we have sophos utm 9. We want to do white-box testing with a dedicated kali host. we want to give all access permission for the host to scan all port and ip of internal network. What should I do for this purpose? Any help would…

Hello Sophos Community, I noticed a strange phenomenon when I wanted to set up a guest network. Since this network has no access to other networks and should be able to browse the internet freely, I created a firewall rule as follows: Guest network -…

What is the best way to block all traffic to .zip TLD via UTM9? Normally I would use web filter profile with regex, but that isn't working. I've already blocked via intune where applicable, but that doesn't cover all devices.

I m facing in issue to accessing my sql server database on port 3306 by app sql front . I created rule in firewall from internal lan to my dmz server for mysql port 3306 . Rule Source -Lan Device -my System Ip Destination -DMZ Device - My Sql…

Hello everyone, a customer requires us to use the Web Protection of his UTM. He wants to block all sorts of traffic. The moment I activate the Web Protection all VLAN Network separation that is configured in the Firewall is basically gone and I can ping…

Hey how can i disable "default drop" logs of Sophos UTM, I don't have any rule for the default drops so i can't uncheck the log option and i don't wanna create an any--any drop rule and uncheck it. How can i disable default drops in this case?

Newbie question. I am running Sophos Home UTM 9 software appliance on a server I built. I have an app running on a single workstation that needs to communicated in and out on ports 4000 and 4001. I set up the following rules but it doesn't seem to be…

Hello I want to know if it is possible to publish 3 ports (8000,3000,3001) of a server connected to a RED50 in standard/split mode. Currently it is working configuring the RED50 in standard/unified mode, but as all the traffic goes through the UTM Firewall…

Hi Everyone! Our development team uses Unlayer to bind pictures/images from one (source) website onto another (target) website via iframe. Unfortunately, Unlayer cannot work with source websites behind a Sophos UTM. Every other source works fine. …

Hello Everyone, I'm trying to create a firewall rule to allow traffic from my DMZ zone to Internet. My question is: Can I block the IPs (when going to internet) that are considered dangerous or ip addresses from countries like china and russia???…

Hi, mattin here. Im using SG Sophos and stuck just now. I want to add rule to allow connections via SG firewall to one service which is using some ports (which I know and can configure) and - as destination - is connecting to external servers which they…

Hello dear members, quick question. I would like from A > Any > B also back again B > Any > A Explanation: I would like to be able to reach e.g. with my notebook A the notebook B by Ping and also vice versa. The aktiv Rule: At source it says:…

I am very green when it comes to networking. I am running Sophos UTM 9 Home Edition on a VM as my firewall. I thought that I would go through my firewall rules and "harden" things up a bit by getting more granular with the rules. The first hurdle that…

Hi, Our new voip desktop phone app (MaX UC / Mitel) has a chat feature that should include the ability to send over sms. It looks like it's getting blocked as below: I have these (among others) allowed between my LAN and my provider's server (the…

Hey guys, having an issue with our UTM here. So we're trying to go hosted VoIP, but having issues getting traffic out of our UTM to hit the host servers. Strange thing is that the mobile app for our provider works fine, on the network, but the desktop…

Dear Community I am faced with a specific issue regarding firewall rules. By default, you can only filter IP networks/ranges, which is fairly sufficient in most cases. However, we need to filter out certain IP ranges coming from in on two interfaces…

Sigh my browser died and I have to write this again. It was a lot more creative before, I can tell you that. So I have a datacenter with a Sophos UTM 9.506-2 cluster as my gateway. I've created a new VLAN210 which is not supposed to talk to VLAN31…

Hi, I am new to the Sophos UTM. Have been using Untangle, but just migrated into Sophos UTM and i really like what i seen so far. The only issue i have is: I installed and configured (as far as i can tell) the Sophos UTM, but when i enable Web Filter…

Good Morning, i have cluster UTM SG310 with firmware version 9.509-3 WAN IP IS: 1.2.3.4 Additional Address: 1.2.3.5 Internal LAN: 192.168.0.100 MPLS Gateway: 192.168.0.15 Web Server: 192.168.5.19 (Under MPLS) Static Routing configured on…

The main network for the entire organization is 192.168. 168 .x That is VLAN 168 There is a management network on network 192.168. 150 .x That is VLAN 150 Members of the IT Group have workstations on the 168 network (as do all other computers…

Hi, I have an SG230 with a couple LANs: Staff and Guest. They work fine and can get out to the internet. I'm trying to add a third LAN. I seem to have all the settings the same as the other two (different subnet of course) but for some reason at cannot…