Sophos UTM and Regex in Webfiltering Exceptions for Office 365 and MS Teams

Good morning,

we have a SG450 cluster with Sophos UTM 9.705-7 installed.

Yesterday we added some Webfiltering Exceptions to allow some sites of oOfice 365 and MS Teams.

1. We copied the Exceptions listed in this Sophos KB article for XG Firewall:

https://support.sophos.com/support/s/article/KB-000038173?language=en_US

2. Check the connectivity to the Microsoft Servers with this site:

https://connectivity.office.com/

3. The Webfiltering Exceptions didn't matched!

So we tested the Regex with: https://regex101.com/ 

For example: ^([A-Za-z0-9.-]*\.)?office365\.com/?

--> Regex 101 says: 

If I change the Regexpattern to: ^https?:\/\/([A-Za-z0-9.-]*)\.office365\.com

Then the following url is matched: https://xx.office365.com

-------------------------------------------------------------------

Second Point:

We saw this page: https://support.sophos.com/support/s/article/KB-000034481?language=en_US 

for example this URL: ^https?://([A-Za-z0-9.-]*\.)?apple\.com/

If i use this Regex Pattern in Regex101 Checker than https://apple.com is not matched!

Additionally there are some errors thrown:

When I change the Regex Pattern to: ^https:\/\/?([A-Za-z0-9.-]*\.)?apple\.com  then the match is successfull!

-------------------------------------------------------------------

So does anybody know...

Do Sophos XG use  a different Regex check mechanism than UTM?

Is Sophos escaping some characters internally? For example: ^https?://  to: ^https?:\/\/

Best regards

Bepo