Thank you I will try this . :)
↧
Forum Post: RE: How to keep my Webfiltering enabled even if my computer is not connected to the corporate network
↧
Forum Post: Cyberoam Anitvirus Issue
hello dear Sophos community i have an Cyberoam 50iNG and its firmware version is 10.6.6 MR-1 with IPS , AV and AS , Web and application filter , support 8x5 license everything works fine except Antivirus , I can't start its service and it can't get signatures updates too . I reset the appliance to factory default setting and i chose to remove reports and signatures as well but it didn't work out . i wanted to manually update the antivirus signatures but there is no version number in front of anitivirus in > system > update path. so is there any way to fix this problem ?
↧
↧
Forum Post: RE: Silent uninstallation of Hitman.PRO (Exploit Prevention)
But be aware of infinity loop.... It would be great, if guys from Sopohos can recreate uninstall process and get back silent switch working as should.
↧
Forum Post: Proxmox slow upload speed
I installed latest version of Proxmox and made 2 virtual machines one with pfsense and another with sophos XG. Basically with default settings both since I didn't' spend much time configuring them, just basics like network WAN/LAN adapters and fw rules. I have a 50/50 Mbps line I never had both running at the same time but in pfsense when I do a speed test I get the 50/50 but with Sophos I get 50/5 or even less, it only affects to the upload speed. I have to troubleshot the problem for hours but didn't find a solution, in fact installing pfsense was part of this troubleshooting. Any idea what could be the problem? I would appreciate if someone can point me in the right direction. Thanks in advance
↧
Forum Post: RE: There was a problem while establishing a connection to the server. Details: LogonUser ("SophosSAUTHSERVERANMEaaa",".",...) failed A Windows API call returned error 1450. Code 00000070
I suppose the best way to troubleshoot this is to isolate the API call LogonUser. If you have Visual Studio installed*, you could create a new empty C++ project called LogonUser, add the following source code and build it. Note: Under the properties of the project, Under the configuration Properties - C/C++ - Code Generation you may want to set the Runtime Library option to be /MTd if building in debug to make it more portable. The code file, e.g. Source.cpp: #include #include int wmain(int argc, TCHAR* argv[]) { if (argc != 4) { std::wcout " << std::endl; return 1; } HANDLE hToken = NULL; if (!LogonUser(argv[1], argv[2], argv[3], LOGON32_LOGON_SERVICE, LOGON32_PROVIDER_DEFAULT, &hToken)) { wchar_t buf[1024]; FormatMessageW(FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS, NULL, GetLastError(), MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT), buf, sizeof(buf), NULL); std::wcout << "LogonUser Failed: " << GetLastError() << ": " << buf << std::endl; return 1; } else { std::wcout << "LogonUser succeeded." << std::endl; return 0; } } This will create you a exe called LogonUser.exe. As a test I would use the local SophosSAUTHSERVERANMEaaa account as the local SophosSAUTHSERVERANMEaaa username already has the logon as a service right which is required given LOGON32_LOGON_SERVICE is set on the LogonUser call. LogonUser.exe SophosSAUTHSERVERANMEaaa . password I'm using . to denote the local computer but the local computer name could also be used. The username ad password should be in the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\AutoUpdate\Service Hope it helps. Regards, Jak * https://www.visualstudio.com/downloads/ Visual Studio Community 2017 would do.
↧
↧
Forum Post: Connect to network Issue
Hi, hope you all are doing great i have a problem with Google Chrome behind sophos XG i`m using AD authentication with sophos to let users access the internet but iam facing problem with google chrome trying to access the firewall or access my HTTPS web server (local) getting Connect to the network message although the user can access the internet without problem and when i try to use firefox i can access both the firewall and web server without a problem any idea about what causing the problem ? thank you in advanced
↧
Forum Post: Gateway is marked with a red dot but still working
Hi everybody, my gateway is stated with a red dot in the Sophos UI, but it is working correct. The only problem I'm recognising is, that about every month the sophos loses the PPPoE connection without noticing it. I than have to restart the sophos which is a little bit annoying. Is there anything I can do about that?
↧
Comment on Top Community Users for 2017
Congrats! And thanks for the fantastic contribution to this user community! (which in my opinion is worth a lot more than a $100 giftcard)
↧
Forum Post: Can't remove last interface alias on XG210
Hello, I need to remove a wan interface alias after scroll to the last alias and try to select it, the page returns to centre selecting another interface alias and I cannot remove the correct alias.
↧
↧
Forum Post: RE: Gateway is marked with a red dot but still working
Hi, Check your WAN Link Manager setting. There you can configure a Failover Rules. Cheers
↧
Forum Post: RE: HA setup with DHCP interface supported?
Yes the WAN interface is configured with DHCP and gets a public IP from the ISP via the Virtual MAC. It still works when there's a failover. Although it seems that we sometimes have problems with IPSEC-VPN and that's why I was wondering if DHCP could be the problem.
↧
Forum Post: VPN Tunnel after upgrade to MR5 is continiously establishing new VPN tunnels
I have a strange behaviour after the Upgrade to Version MR5. One VPN tunnel to another Sophos 17.MR5 is showing up multiple times and slows the whole GUI down. My syslog server is full of millions of logs. Does anyone know this bug? cheers Niko
↧
Forum Post: RE: Up to 50 pc's reporting Missing: Sophos System Protection Service
You can uninstall that using the MSI also: Going by this KBA: https://community.sophos.com/kb/en-us/122126 , as I no longer have that component to check. The following command should do it: MsiExec.exe /qn /X{DFFA9361-3625-4219-82C2-9EF011E433B1} REBOOT=ReallySuppress I am assuming that ProductCode is still the correct one. If not take a look under: \HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ to see if you can find the UninstallString of Heartbeat. I believe it is a 32-bit component. For a 32-bit computer it would be: \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ of course. For the MSI to uninstall, if you have Tamper Protection enabled, then: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Config SEDEnabled will be set to 1. This will cause the uninstall to fail. Disabling TP should set the above value to 0 and the MSI will uninstall. Regards, Jak
↧
↧
Forum Post: RE: XG85 don´t get Emails
ok at friday i can try it, i will inform you if this was the solution. Thank you!
↧
Forum Post: RE: Web protection is no longer functional. The filtering driver has been bypassed or unloaded [0xa058000c] Windows 10 1703
Well on the Windows 10 platform, I believe the check runs 5 mins after startup and then every hour. The executables that perform the check (swi_lspdiag_64.exe and swi_lspdiag.exe) are launched from the swi_service. This is detailed in the first activity of the thread. I think it's a case of the checks can work, work, work, fail, work but I don't think the final work clears the previous fail message. You can test if web protection/control is working at any time by going to: http://www.sophostest.com/ For example: http://www.sophostest.com/malware will test malicious website lookups. http://www.sophostest.com/eicar will test content downloads. http://www.sophostest.com/adult will test web control if you're blocking/warning on the Adult category. Regards, Jak
↧
Forum Post: RE: HA setup with DHCP interface supported?
Hi Ludwig, This functionality was added in v16 and now the DHCP/PPPoE interfaces are supported with HA A/P setup. I will get the KB article updated. Thanks
↧
Forum Post: RE: SSL-VPN Bad compression stub decompression header byte: 102
Where is that "comp-lzo" setting in the XG? Thanks!
↧
↧
Forum Post: RE: SSL VPN - How does the client know where to connect?
We have a DNS A record we want to use for the client configs but how do we get that in there as default versus all the WAN addresses that auto-populate?
↧
Forum Post: RE: Sophos new on premisse Enterprise Console?
Yes, on premise Central in a Box with the look and feel.
↧
Forum Post: Vyatta logs
Hi everybody, I would like to know if those logs comes from vyatta firewall logs? These logs are only about vpn? Otherwise where does those log come from? In case those logs come from vyattta firewall Is there a way to configure the firewall so that to obtain (in the logs) information about ip src, ip dst, mac, packet denied , packet permitted? Thank you very much! Xavier
↧