Hello Sophos UTM SPX Users,
I have a question concerning the standard password length for SPX encryption.
The sophos utm by default generates passwords with a length of 8 characters.
Today, this is insecure, when the attacker uses a brute force method with special GPU computers. (Reference: Crack Me If You Can Contest)
It may be cracked within less than 1 day.
The password length, that I can configure on the first tab „SPX Configuration“ of SPX Encryption is only for user selected passwords.
And I don`t want user selected passwords, because they are typically not the best ones.
So we use the Password Settings / Password type:
"Generated one-time password for every email"
But for this, then the sophos UTM only generates 8 characters long passwords.
Best Regards
This thread was automatically locked due to age.
