I really like the UTM but I find the interface a little bit wildly at times.
For instance, just sticking with mail (which gives me the most grief)
1. I find that lots of spam was getting through even though I had extra RBL's set etc. The country blocking on the firewall solved this. It did however block some legitimate email going out as connections were refused by the destination mail server eg trendmicro in japan even though the destination email was for a uk address.
2. Putting exceptions in for this isn't the easiest task as a bit of detective work is needed as to why the mail is being refused. Perhaps Sophos could place something in the logs eg country blocked for that email instead of just "connection refused" from the destination mail server because it can't perform an rdns connection to ensure the mail server is legit. Maybe some sort of daily report could suffice here to at least let you know your mail spool is filling up and why?
3. When you do put a country blocking exception in, although it's nice to have all those flags etc, there are pages to scroll down and a bit of wasted space rather than the information right in front of your eyes. Especially when you have to add multiple exceptions. Perhaps these could be small summary eg grid form and then expanded if needed rather than a full blown page?
Minor niggles from me for an exceptional product but there's always room for improvement I think.
This thread was automatically locked due to age.
