YouTube and Facebook access block specify users with static IP address

Hello all, Networking certainly isn't my forte and I've only really been handling our UTM sporadically for 2 years, so please bear with me. I did not install the UTM nor was I the primary admin, but I want to make sure that we're decently secure. …

Hello, i use Sophos UTM Home since years now, and im really happy with it:) But as the Sophos UTM is still missing the Open VPN Client possibility, and DNSCrypt DOH is also not possible, i was thinking to add an other FW as Fronted Firewall to configure…

We are adding 2 WAN connections next week I have reviewed as much documentation as I can but I cannot determine the best and correct configuration to achieve this. both new WAN lines are working 1st mainline microwave and the 2nd fiber we want to creat…

We are adding 2 WAN connections next week I have reviewed as much documentation as I can but I cannot determine the best and correct configuration to achieve this. both new WAN lines are working 1st mainline microwave and the 2nd fiber we want to creat…

Hi, I am using Sophos UTM also as my DHCP server. I have IP addresses available from 192.168.2.1 to 192.168.2.255 (I believe this range of 256 IP addresses are default because of subnet mask 24) I went into DHCP and then on servers tab, I see the…

I have a physical machine (PM) with physical ports eth0 and eth1. It is running a virtual machine VM0 via KVM. As consequence, eth0 appears aliased to virbr0, such that the only ports that are "up" are eth1 and virbr0. Other VM's lay behind VM0, which…

Sophos UTM Configuration Interfaces External (WAN) 82.x.x.x DMZ 10.0.0.1 /8 Internal (LAN) 192.168.0.1 /24 Network Services - DNS - Global - Allowed Networks DMZ Network LAN Network Forwarders - DNS Forwarders Google DNS…

DMZ, VPN Client, Routing, FW Hello, I would like to setup a router (VPN Client) in a DMZ and route traffic from LAN over DMZ to Open VPN Tunnel. I have the following configuration till now: WAN Interface (Ethernet) : 82.x.x.x LAN: 192…

Hi guys. I'm having a big Dell severs, ruining Sophos UTM 9 Software. Until now, I was using Cisco 2921 as Router, in front my UTM. I have 200 MB syn. Wan Ethernet line, and need to increase it to 300 or 400Mb, which mean i have to buy another bigger…

The network in question was getting DDoS attacks almost daily so IPS was enabled and configured which stopped the attacks. In the Anti-DoS/Flooding tab TCP SYN Flood Protection, UDP Flood Protection, and ICMP Flood Protection have all been applied. Since…

Hello, We are having several customers that they host their solutions to our data center. Until now each customer had their own firewall and their own IP range. With the current configuration we used a different firewall brand for each customer. Each…

Please see the attached network topology, I'm looking for opinions on the best configuration based on performance and security. I welcome any suggestions that the experts on the forum can provide to assist with this config. I would also welcome…

Hi, Internal LAN is 192.168.157.0/24 and the new interface added is 192.168.158.0/24. Our Sophos SG 125 has 192.168.157.70 ip I´d like to block all traffic between LAN and 192.168.158.0/24 but the existing rule rejecting all traffic does not work…

Sophos UTM 9.403-4. Download of NPR podcasts used to work, but began failing 10 days ago. No changes on my side other than UTM maintenance patches, but I don't know if NPR made changes. Trying to download NPR podcasts on Android devices and now receive…

I have two Sophos AWS instances that are connected via a hotswap configuration with each of them in their own public subnets in the VPC. Behind that I have two private subnets that they send traffic to and I'm unable to connect via https to any site.…

I am new to this and just finding my way around setting up utm/firewalls i have a 2 firewall setup an internal sophos utm 9 ffirewall and an external firewall The internal firewall sophos utm 9 is setup where all computers and mobile devices are behind…

I tried setting up sophos today in a test environment to see how much throughput I could get, but I couldn't get far. My core network is on a 10. subnet and I setup a computer and assigned it with 192.168.2.20 subnet IP. Sophos was the router between…

Hey there, we got plenty of VLANs/subnets for client-PCs which we'd like to wake up in the middle of the night for update issues. Unluckily after switching to our new SG450 WOL doesn't seem to work anymore which it did with our old Cisco ASAs. I read…

I currently have two separate networks in the same building and a remote RED connecting to network A Network A, uses a fibre BB connection, 10/100/1000 switch, 20x PCs/ servers/ printers, on 192.168.100.1/24 through a Sophos 110/120 UTM Current setup…

Hi all, I have a SG330 and I want to setup a DMZ, to put my edge transport Exchange server in. The Exchange server will be a virtual machine, hosted on a Hyper-V 2012 R2 core host, that currently resides on the internal network. My question is, whats…

Hi everyone, Similar to in TMG and Palo Alto, is it possible to match both source user group and source network together when building a rule? i.e. VPN Access users coming in on the VPN subnet can access services x,y,z. Thanks in advance. KJ

I added a second NIC to my UTM (192.168.3.*). The idea was to add an extra AP to isolate guest-clients from my local network(192.168.1.*). Everything seems to work fine. I get an IP from the DHCP service and I can access the internet from my guest LAN…

Hallo Community, Ich kenne mich leider mit dem Thema Sophos Firewall wenig aus. Beispieldarstellung: Ich habe 2 Interfaces (eth2 und eth4 an den vorderen Anschlüssen angeschlossen), welche in der Firewall auch angelegt sind (Interfaces & Routing…

Hello, We have license for 75 IP's LAN's and DMZ IP's go through Sophos FW. There is some way configure that all DMZ clients will get out with NAT ? I mean That sophos will stop count all IP's behind DMZ interface ?