Jak, Has this changed recently? When I tried to tag a site in: https://cloud.sophos.com/manage/config/settings/websites-tagged (it was classified Spam-URL despite being a customer's website), the site would still come up blocked until the re-categorization request was completed. It would be great if we had a rapid method to override the policy.
↧
Forum Post: RE: Sophos Central -Categories
↧
Forum Post: RE: Phone support, WT*
I love this post. I also love how reply posts to this is Sophos saying they cleaned up your post. Their support is the worst I have ever, ever, ever dealt with anywhere. Tell them to go fuck off. I waited an hour and a half for someone to speak to on multiple occasions and they are useless help so I ask to get to a level 2 and they just put me back in the queue. Unbelievably poor customer skills and Sophos needs to fix this badly or people will start to leave them as they should. I am going to our Director and requesting we drop them when our renewal comes up.
↧
↧
Forum Post: Log In
I can't log in to Home ??? And there is no Forgot your Password--which I haven't but I am not recognized
↧
Forum Post: RE: Log In
Used the same log in to join this Forum ???
↧
Forum Post: RE: Why won't my UPG license activate on my Sophos SG310?
That worked thank you!
↧
↧
Forum Post: RE: What is "ZIP FILE DOWNLOAD" and "QUIC" on Sophos XG Firewall Report?
ZIP FILE DOWNLOAD means just that - downloading of .zip files QUIC - The QUIC protocol (Quick UDP Internet Connections) is an entirely new protocol for the web developed on top of UDP instead of TCP. It is used by the Chrome browser when connecting to Google services
↧
Forum Post: RE: NAT Subnet question
I reached out to the datacenter again and asked them to tell me everything about the routes. Guess what I needed 12 more static routes! Should I NAT the Sophos firewall traffic even if a cisco router does the nats? for example this is how to NAT Sophos Firewall generated traffic... set advanced-firewall sys-traffic-nat add destination 172.16.176.105 snatip 10.141.13.105 10.141.13.105 is a printer on my local area network. The only was servers and the remote applications can print to it is to use 172.16.176.105 that nats to 10.141.13.105... Looks like it could be a mess in a hurry as this hides the actual IP addresses of its interfaced right? https://community.sophos.com/kb/en-us/122999
↧
Forum Post: Blocking Weibo videos?
Hi, I have a weird thing going on, Sophos seems to be blocking access to Weibo (a chinese social media site) from loading videos. It'll start a bit, then stop loading. Open to any suggestions, thanks!
↧
Forum Post: RE: Blocking Weibo videos?
Figured out it was the Web Filtering under Web Protection. I've turned it off for now. Is there anyway to whitelist certain sites?
↧
↧
Forum Post: Why awarrenthttp process is using 99% CPU and the Internet access is very slow with XG 450 over 1Gb/s link ?
At a peak time awarrenthttp process is using 99% of CPU, load is high above 8-9 and the Internet Access is slow over 1Gb/s link with up to 600-700 live users. During the peak time link usage is around 200-300Mb/s or less. The avd scanning is set to Avira real time and has 1MB limit but still awarrenthttp can go to 99% at peak times. I have tried with DoS on/off, reducing the number of IPS and application filtering to reasonable minimum and have found little difference. The support case has been opened since mid-December 2016 and no resolution has been provided. Maybe someone in the community has an answer ?
↧
Forum Post: RE: NAT Port range not still not working
Hi Manuel, some ports are working 50000-50005 I can see that they are open but the remaining I am still guessing why others not working which is included in the port range Yes my UTM directly connected to WAN router
↧
Forum Post: RE: UTM 9.5 coming soon
is this all thats going to be in 9.5 ? i see nothing about heavily requested features: - improved application control - improved ipv6 support (nat64, selectable smtp protocol, red over ipv6) - lets encrypt support
↧
Forum Post: RE: Exchange Outlook Anywhere WAF not working
I got it working in the meantime by applying a protection rule with everything excluded except "Pass Outlook Anywhere". It seems that this is different to having no protection rule. I do want to enable all the correct protection again. Once the dust has settled I will try your solution. Thanks.
↧
↧
Forum Post: RE: UTM 9.5 coming soon
So how do i sign up for beta? I can't access the beta forum anymore
↧
Forum Post: RE: Remote Access SSL VPN + Comodo SSL Certificate
I don't know about UTM, but on XG you cant use ANY certificate (for SSL VPN) signed by an intermediate CA, I already opened a case with sophos ant it is like that "by design" God knows why not...
↧
Forum Post: RE: Sophos Encryption Windows 10
Hi - As I understand if you're using Windows 10 (not Home) it will have to be encrypted with BitLocker. Sophos will just help manage the BL keys centrally for you. This table may help https://community.sophos.com/kb/en-us/118945 Multiple people could log into a shared machine - Just select Other User from the welcome screen. However I'd probably create a "shared computer" policy and then apply just TPM only to this group. That way you wouldn't need to share the PIN/passcode with all the users that need to log on? This is set in the authentication policy - BitLocker Logon Mode for Boot Volumes Hope that helps?
↧
Forum Post: RE: Clientless access does not rewrite html for relative paths
FYI clientless access with HTTP(s) resources does not work. There is a known issue (NC-13622, present from XG 15.1.0) about clientless not supporting html forms... So you can't show any input to the use via HTML... Also there are two other issues (NC-13570 from XG 16.1.0 and NC-10370 from XG 15.1.0) about not rewriting any relative path resources. I really don't understand how could Sophos release on production the clientless access where it simply does not work in ANY scenario (for http, I am not talking about RDP, telnet, etc). Don't they have a QA dept.?
↧
↧
Forum Post: Puremessage isn't saving whitelisting senders?
Hi, We are running Puremessage 4.0.2 and send we receive an email from a safe and known sender we are unabel to add it to the whitelist? We tick the box to rememeber sender and save the configuration but it still blocks it next time? Any ideas? :)
↧
Forum Post: Linkbündelung Intern
Hallo, wir haben aktuelle eine SG310 diese soll später durch eine zweite SG310 ergänzt werden. (Clusterbetrieb) Kann mir jemand sagen ob die Möglichkeit besteht, 2 Lanports zu bündeln um mit diesesn 2 Ports an jeweils 1 Switch anzuschließen ? Die Überlegung war auf diesen gebündelten Port 1x DHCP laufen zu lassen so das dieser an beiden Switchen "anliegt", für den fall das einer der switche ausfällt. Ich hoffe Ihr wisst was ich meine Gruß cech
↧
Forum Post: RE: How to configure Sophos Safeguard Encryption on Mac OS X (10.11.6 - El Capitan)
Which actual version of Sophos SafeGuard are you running Dornao? I did have some issues with Sierra and SG as you described - previously trusted certs were suddenly no longer good enough!! I updated my back end and client and now everything's fine again. I'm currently running 8.00.2.13 on the servers and my Mac client is running 8.00.1.7 My certs are externally signed with a CA so I didn't have any trust issues. Self signed certs "should" be ok though as long as you're just doing this all internally?
↧