• Any ideas why i am not seeing any network data in the reporting ?

    Hi fellow Sophos users, installed UTM 9 a few days ago , love it ! great network traffic info , BUT now for some reason im not seeing any traffic at all on 2 NIC's ... i know eth 2 is a busy network and according to the pic below , no more traffic…
  • Data disk is filling up

    Hello, I have 9.502-4 and I found my Data partition certainly filled from this morning (around 6:30AM). Is there any way I could figure out what file/directory is it? My "du -shx /var/storage/* | sort -rh | head -10" returns: 9.2G /var/storage/cores…
  • [BUG] Translation bug in 9.5x

    In the german translation there is an error in SSL-VPN Remote access it should be "Auto-Firewall ist an " Cheers, Chris
  • DNS Forwarding not changing

    So I am trying to change from my ISP DNS servers to OpenDNS, and I have it set up but keeps saying under "currently assigned forwarders" that it is using the ISP DNS servers.
  • WAN Interface flapping

    Hi, i discovered that one of my WAN Interfaces keeps flapping. I set it to static 1000MBits FULL to avoid negotiation errors. but this doesn't help out either. The Question is: In which log can i see why the Interface is in error state…
  • Web protection, profiles & policies

    Hi All I've recently installed the Sophos UTM product in a home environment and I gotta say I'm mighty impressed with what i've seen so far. However one thing I was looking to implement is two web filter profiles one for the kids and one for adults…
  • Can static routing be done on SOPHOS SG Series Bridged Interfaces ?

    I have got 2 sites connected via L2 Point to Point. Site A which the SIP Server, and other VOIP Call server resources are located Site B which all the IP Phones and Clients are located i am unable to do static routing on the bridge interface. The…
  • Is there a way to send reports or logs out from UTM 9?

    I'm using my UTM 9 as a way to block content on my network mostly as a router/proxy. Is there a way to send weekly reports about sites blocked to external email addresses if I have an SMTP server external to my network? Thanks!
  • Where I can download SNMP MIB for Sophos UTM?

    Where I can download SNMP MIB for Sophos UTM? Thanks, Vitaly
  • Logging recomendations

    Hello forum, I'm looking for any whitepapers/recommendations available about configuring the logging. I know the basics but some more fine tune required. As of now on one of my UTM servers are ~3.500 users connected and generates http log in size of…
  • How i can see the band usage splitted by connected computers "live" ?

    Good morning, i'm using an SG125 with UTM9 I would like to have the opportunity to see in real time the instant bandwidth usage of the network to monitor which machine is using "how much" but i can't find the bandwithmeter page. I would like to identify…
  • PostgreSQL PG_VERSION is missing error

    My UTM9 is constantly generating these errors in logs: 2017:05:17-08:31:39 portal postgres[28059]: [3-1] FATAL: "pg_tblspc/16774/PG_9.2_201204301/16775" is not a valid data directory<131>May 17 08:31:39 postgres[28059]: [3-2] DETAIL: File "pg_tblspc…
  • Unable to Create Rule for "BJNP" Protocol / Multicast

    So after seven years of happily using UTM I thought I had all pretty well down pat, but now I find myself in a state of confusion. Someone has added a Mac Pro onto a subnet here, and I suddenly am getting lots of log entries like " Default Drop BNJP…
  • Skype or GotoMeeting and Multipath rules

    Hello, we have three uplink interface with our SG230. 2 asymmetric and 1 symmetric line. I only want to route (transparent) GotoMeeting or Skype traffic through the symmetric internet uplink. Is there an application filter to achieve this? or Do I…
  • VLANs on the firewall

    Hi all, so im new to managing hardware vlans and was wondering how or why id configure VLANs on my SG210 as well as my l3 switches. can anyone advise? Do i need to match the vlans that i have on my switch on the firewall?
  • Add new DHCP option CODE

    Hello everyone, I am using SOPHOS ASG Software last version "9.411-3", and I would like to add 060 option, but I don't found it in the codes list, please kindly confirm the possibility of using this option in my firewall model, because I found a solution…
  • Block SSH and WebAdmin facilities from a single IP address

    I'm getting a bunch of failed login attempts across multiple devices from a single IP address. I know there is way to limit the SSH and WebAdmin access to certain networks. I have added a firewall rule that drops packets from that IP but I'm still…
  • Why is the Summary data so inaccurate in the Executive report?

    For a long time I have been only looking at the Summary section of the Executive weekly reports but I noticed recently that section is wildly inaccurate compared to the sections below it. I remember when I set Sophos up a year or so ago that the values…
  • Need help with proxy logs to determine source of connection attempt

    2 days ago the http.log file on my UTM started getting filled with millions of entries like these, causing my disk to fill and using up the connection sockets: 2017:03:03-12:54:50 portal httpproxy[9026]: id="0001" severity="info" sys="SecureWeb" sub…
  • Office 365 ssl error

    We are having problems with user that are accessing office 365 thru outlook and are getting ssl certificate warning from our proxy. I haven't found any information that describes what has to be done to solve this problem. Thanks Hans Petter Jacob…
  • Intrusion Detection for dropped packets

    Sophos UTM 9 model SG230 firmware version 9.411-3. In the past we have had a lot of issues on this firewall with DDOS attacks on our DNS servers. Those DNS servers are long gone and I have added a WAN firewall rule to drop any TCP/UDP port 53 traffic…
  • Interface network and broadcast definition not updating after subnet mask change

    Under Interfaces the subnet mask / CIDR of the LAN interface have been updated from /21 to /22 : But under Network Definitions the network and broadcast have not been updated: The UTM have been restarted after the change. The UTM is part of…
  • Best Practice for defining AD Authentication Servers

    I actually have two questions related to backend AD Authentication and web protection on a Sophos UTM 9 version 9.411-3 We recently had an issue with our Primary AD controller (DC1) which prevented users from authenticating and getting through the web…
  • Random websites stop loading - DNS ??

    I've been fighting an issue for months where random websites stop loading with ERR_CONNECTION_ABORTED or ERR_CONNECTION_RESET When this occurs, all other sites function fine. I've turned off almost every feature on the UTM9 without resolution. My…
  • Do I need DNS entries in both Windows server, and Sophos UTM?

    Hey guys, I am a home user of Sophos UTM and I have what is probably a basic networking question. I am trying to setup #3 in the DNS Best Practices but I seem to be duplicating work. I have already setup DNS entries in Sophos for each of my devices…