Hello I've setup a sophos email security for a customer. While setting up the email security we also switched to google workspace. E-mails working normally but one thing that is not working is smtp sending emails from a web from (they have a contact form…

Can someone point me in the direction of a list of Email Header attributes I can use in Data Control Policies please? Help guide doesn't cover this and Sophos Support was unable to advise me on this in a recent call. Thanks, Craig

Hi I enabled the Attachment file type (Inbound) in the Data Control policy, I have excluded specific email address from this policy, but still this emil is blocked by the Data Control policy. I have excluded because the policy blocked macro files…

Case: 06617332 Spent an hour on a remote session but support person clearly had no idea what they are doing. I've just moved a brand new client who's never used any Sophos product before on to Central Mail and now all their SPF checks are failing…

Dears, Kindly I Have configured my SOPHOS Email Gateway for G suite and i have received test email on Log Email Gateway - Message History but i don't receivedit on my mail on GMAIL so please advice

Dear all, I was wondering how should be treated Exchanged shared mailboxes as they are not really user, neither distribution list or Public Folder. If they are added as users, I guess that it will probably count a user licence which is not really…

Overview Data Loss Prevention (DLP) policy string matching based on keyword and/or regex works only with UTF-8 encoded message. What to do If you observed that it is not working as expected, then first verify the email header to see which encoding…

Hello Sophos Email friends, I'm struggling with the quarantine because there are lots of emails quarantined by "Authentication failure / DMARC". As an example I have an email that is OK and that looks pretty good, but it's quarantined by DMARC. …

We've been trying to import our shared mailboxes from Office 365. Currently we have all our mailboxes imported from AD, but our shared mailboxes are in not in our AD, only on Office 365. From the documentation it looks like we need to use Azure AD in…

Overview Sophos recommends that its domain ( sophos.com ) be whitelisted in Advanced Threat Protection (ATP) of Microsoft Office 365 to prevent ATP from automatically triggering links in Quarantine Summary sent by Sophos Email. Applies to the following…

Overview As of January 20, 2021, we have received customer reports of users experiencing "401 access denied" errors when clicking Time-of-click links in emails. If you are experiencing this issue, please raise a support case, attach the affected email…

Overview Note: Please contact Sophos Professional Services if you require direct assistance with your specific environment. This recommended read outlines the steps to configure Sophos Central email for Gsuite/Goole Workspace. This article covers…

Migrating from Central Email Gateway to Mailflow? Here are the documentations that will help: Set up Sophos Mailflow ( Note: Click on the " Existing user " link) Fix conflicts with Microsoft 365 rules Prevent duplicate scans Testing and fixing…

Table of Contents Search & Destroy Sophos SND Quarantine Folder Search & Destroy Search and Destroy, Sophos Email's new post-delivery protection capabilities for O365, is about finding malicious emails already in the mailbox of the users…

Hi Everyone! Do you ever get these errors when clicking on a URL link within an email thread? OR If so, then this is because there are similar technologies being applied on top of the other that are meant to protect users from accessing high…

Hi everyone! Do you sometimes see sender checks like SPF do not work as expected? For example in Sophos Email that it was accepted but sender check failed in the recipient email server? This might be because the checks are not done in the proper…

Hi Everyone! I have just encountered a case where a customer have Mailflow mode (as opposed to Gateway mode) where in the sender domain actually have a failed SPF result but was let through in Sophos Email's SPF checking (Action: quarantine) Upon…

Good afternoon dear, We recently had some comparisons with the email gateway tool, these comparisons with the trend micro email tool. The comparison refers to the characteristic that this tool has "Against BEC attacks". Trend micro currently in this…

Moin an alle, links in Emails werden von Sophos gekapselt und in folgender Form dargestelt: https://eu-central-1.protection.sophos.com/?d=plesk.page&u=aHR0cHM6Ly9jaGFybWluZy1oYXdraW5nLjE1Ny0yMzAtNDEtNzAucGxlc2sucGFnZS9sZWFybi9lbGl0&i=NjE2OTYwZDZmMzJlOGEwZTVhNzdmOTNh&t…

I have a strange situation where an email address contains an authentication key for an SMS provider. It leaves our system with a capital A, Sophos processes the email and then it returns it to O365 with a lowercase A which causes authentication to fail…

I'm in the middle of setting up a new client on to Sophos Central Mail. The client has 10 public domains. When I link them up through Sophos, it only creates four connectors (2 inbound and 2 outbound), so no duplicate connectors, it just shares the same…

Since moving from another antispam provider to Sophos, I've started getting Microsoft Quarantine emails again. I've done a message trace and it clearly shows that the message was sent to Sophos, however Central has no record of that email ever arriving…

I am wanting to know how prior Reflexion.net users handled the migration to Sophos when they had to deal with hundreds/thousands of "address on the fly" (AOTF) addresses and no more smarthost send connectors to port 587. 1) The AOTF addresses can be imported…

My connector from sophos to M365 broke last month. I got it fixed but not M365 defender is grabbing a ton of emails under the "Anti spam" policy. I cant seem to see where its going wrong. has anyone had these problems?

Hi, we're fairly new with M365 and Sophos Email Security set up with Mailflow and working fine. Today I had a customer reach out saying that our emails are failing SPF. Examining the headers, this failure is happening when our outgoing email is passed…