• protection Policy for the NextCloud

    Hello, We have a protection Policy for the NextCloud on Sophos, unfortunetly we have many issues with uploading Photo (many times the upload not working at all what ever is the Photo size or extantion ), every time we must connct to SSH to check the…
  • Web Application Firewall (reverse proxy) - pass client ip to server

    Right now the WAF is showing as the source ip address in the log files of my servers. I'd like to see the public ip address of the clients that are accessing the servers. I've enabled "pass host header" but that doesn't seem to do it. Is this possible…
  • Web Application Firewall (reverse proxy) - block or whitelist public ip addresses

    I'm using the WAF as a reverse proxy. I'm wondering if there is a way to block or whitelist access by ip address? i found this post from 9 years ago saying it'd be available in 9.3 but if it's available now i'm not seeing it: RE: Source-IP filter…
  • Problem with garbled site when using WAF with UTM

    Hello. I am using UTM version 9.7. I have configured a web server inside with UTM's WAF. But when I access the site from outside, I cannot see the site properly because of garbled characters like Arabic characters. Can someone please lend me some…
  • Revisit: Microsoft Teams Calendar through WAF

    For all searching for this Problem with Teams not showing the calender app using hybrid szenario. Refering to this basic guide: Sophos UTM: Create WAF to allow traffic through Exchange 2016 using the MS Connection Tool: https://testconnectivity…
  • Revisit: Microsoft Teams Calendar through WAF

    Hello. This is a follow upto an old thread from about a year ago: https://community.sophos.com/utm-firewall/f/network-protection-firewall-nat-qos-ips/126571/microsoft-teams-calendar-through-waf (that thread is now locked) I've tried again to enable…
  • RDG through UTM not Using HTTP and UDP, only RPC-HTTP

    Hello everyone! we have a newly deployed Remote Desktop Gateway Server (on Windows Server 2019) installed in our environment and I was successfully able to publish it through our UTM 9 WAF. Unfortunately, by doing this I am only able to get RPC-HTTP…
  • Microsoft Teams Calendar through WAF

    Did anyone manage to resolve the issue with Teams calendars not showing when using Exchange through the WAF? Microsoft Teams Calendar through WAF - Network Protection: Firewall, NAT, QoS, & IPS - UTM Firewall - Sophos Community The original thread…
  • Content Decoding failing in Unlayer through Sophos UTM

    Hi Everyone! Our development team uses Unlayer to bind pictures/images from one (source) website onto another (target) website via iframe. Unfortunately, Unlayer cannot work with source websites behind a Sophos UTM. Every other source works fine. …
  • WAF Protected server loadbalancing

    Sophos XG Firewall WAF (webserver protection) Rule Protected Servers Selected hosts Here you can add multiple IP/Servers. If multiple IPs are added will WAF perform loadbalance or failover?
  • Can the Module: Webserver Protection: WAF route requests for 1 domain to 2 different real server based on the full URL?

    Good day, I am running Sophos UTM 9.5 (latest version as of now) as a virtual appliance and have purchased the WAF module. Unfortunately I can't figure out how to properly configure this so here is my use case: we use 1 domain: mydomain.tld…
  • Webserver Protection WAF

    Hello, I have a VPN Router in a DMZ, what is routing all my Internet Traffic to a VPN Service. I was wondering to protect the Router in the DMZ, if it would make sense activate Web Application Firewall for this Router ? I know that this settings…
  • WAF for Good for Enterprise DirectConnect

    Hi @all, I am trying to publish Good DirectConnect via the Webserver Protection. I first tested with portforwading (FullNAT) wihich is working fine, so I guess the mobile Device and the Good Server are configured correctly. If using WAF, the Client…
  • Bypass WAF for specific URL

    I have a few HTTPS sites successfully published through my UTM Firewall (mostly Exchange Admin Console/Outlook Web Access). I'm now trying to set up another application, using a different domain name, but the Web Application Firewall log is reporting…
  • IPS Inspection of SSL traffic

    After looking through the UTM 9 features it looks like Web Filtering and Web Application Firewall offer a SSL inspection. It's my (potentially flawed) understanding that WAF and Web Filtering do not equal IPS. Is IPS blind to SSL traffic or is there…
  • Exchange 2013 CU11 502 Proxy Error

    Hello everyone, i like to publish my Exchange 2013 through Sophos WAF in my lab because of some testing scenarios. I've already followed these guide ( https://sophserv.sophos.com/repo_kb/120454/file/Exchange%20WAF%20Guide%20-%20UTM%209.3%20-%20Nov%202015…