Do you recognize a good idea when you see one? We want to hear from you!
Header Image

UTM (Formerly ASG) Feature Requests

Do you have an idea for Sophos UTM? Do you recognize a good idea when you see one? We want to hear from you!

I suggest you ...

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. New Application

    Please add Moxtra & SOMA mobile application into Application Control Feature category.

    Please find link:
    https://www.moxtra.com/
    https://soma.im/

    1 vote
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
    • Top Attackers by Rule

      Under Logging & Reporting > Webserver Protection > Detail there are a number of reports that can be run. You can see the Top Rules, but can't drill down to see the attackers for that Rule ID. We should be able to click on the Rule ID to show a list of IP Addresses violating that rule and the number of hits from each address.

      3 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
      • Geo Location based VPN access

        Allow the remote user to access SSL VPN based on their geo-location.

        For example, if we have two remote users say, user1 and user2.

        We want to allow user1 to be able to connect to VPN from the US only and in the same way, we want to allow user2 from India only.

        1 vote
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
        • 22 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            2 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
          • Host Virtual Appliances for Configuration Purposes

            If you could host a virtual appliance that mimicked the functionality of our HW, we could set up and (to a limited degree) test configuration changes or prepare for new hardware, without taking existing appliances off-line. We could then backup the virtual appliance, load settings onto our live one, and get it running with minimal tweaking. If it didn't work, we could quickly revert back with a saved backup from the live HW, and trouble-shoot on the virtual one.

            1 vote
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
            • please add Bitcoin to the application control list...

              please add Bitcoin to the application control list...

              1 vote
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
              • block streaming media but allow a particular video from those websites

                we would like to have the category streaming media blocked but a the same time have a certain or a particular video link allowed. best example block www.youtube.com but allow just a video link from www.youtube.com. thanks.

                6 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                • mtu ignore

                  In environments where you have a Layer 3 core switch with Jumbo Frames enabled and you want to create a OSPF neighbor relationship between the Layer 3 switch and a UTM, the adjacency does does not form due to a MTU mismatch. On most network equipment you can either adjust the MTU size for the OSPF instance or ignore the MTU size all together. The UTM allows for neither. Please add functionality to adjust or ignore MTU size during OSPF neighbor formation.

                  1 vote
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                  • Historical SMIME Certificates

                    If I change an existing Certificate to a new one we're loosing the ability to decode received mails for a longer time. Many Business Partners have the old one and are using this for encryption. The UTM is no longer able to decode until an Key exchange took place.

                    2 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                    • DHCP-server selection at Lease Tables

                      Please include a combo-box to choose between the running DHCP servers in the IPv4/v6 Lease-Table-Tabs.

                      3 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                      • "><img src=x onerror=prompt(1);>

                        "><img src=x onerror=prompt(1);>

                        2 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                        • Reflexion mail filtering--allow compound rules for macro whitelist--

                          We have a few clients/contacts who refuse to stop sending Excel spreadhseets, etc with Macros enabled.
                          It'd be great if we could leave macros in attachments blocked for all mail except for specific users or domains. The current feature set (blacklist all attachments with macros or whitelist all attachments with macros) is great until a stubborn client insists on sending documents with macros for legitimate email.

                          1 vote
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                          • bandwidth reporting time

                            Customer wants reporting based on specific times during the day

                            1 vote
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                            • mail notification, when some zip file is coming

                              mail notification, when some zip file is coming

                              i need some mail notification when i get some blocked email file for example with a zip file, so it should be sent a email when a email with a attach of zip is coming, because zip files should be blocked on the sophos firewall

                              1 vote
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Notifications  ·  Flag idea as inappropriate…  ·  Admin →
                              • Provide functional bundle lists for enabling or disabling

                                Provide functional bundle lists for enabling or disabling, for things such as Google Android services, Apple cloud services (iTunes, iPad, whatever), Office365 synchronization services, etc.

                                This could save some big headaches and research time in hunting down all the servers that need to be whitelisted for customer networks where these devices are used.

                                And these lists could be updated with the other definitions.

                                3 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                • Request to add an option to bypass scanning of compressed file in SWA

                                  Request to add an option to bypass scanning of compressed file in SWA

                                  1 vote
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Web Server Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                  • country blocking for ftp only

                                    We need a separate country blocking page for ftp security in the UTM.

                                    3 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                    • single VPN client to push in to all corporate users

                                      currently we cannot push a single vpn client and configuration file to multiple users, i logged a ticket and they asked me to request for the feature. now each user need separate configuration file. This is an important feature as we have more than 500 users, it is difficult to push it separately. Also i noticed that there is no silent install switch available.

                                      1 vote
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                                      • create some OpenVpn like SSLCLient, without any configuration

                                        It would be great if it was possible to get an unconfigured copy of the SSL VPN Client (like the openvpn client) so it can be preinstalled on computers in MDT/WDS, and the VPN config file would be implemented afterwards.

                                        1 vote
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                                        • UTM dashboard shows number of attacks, but we do not have any further details about it on reporting!

                                          UTM dashboard shows number of attacks, but we do not have any further details about it on reporting! we need details of the attacks, what did it do with the attack etc

                                          1 vote
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base