Secure Web Gateway

Suggest, discuss, and vote on new ideas for Sophos Web Gateway. Complete web protection everywhere.

Secure Web Gateway

Suggest, discuss, and vote on new ideas for Sophos Web Gateway. Complete web protection everywhere.

Suggest an Idea...

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. More granular search parameters required for Recent Activity Search

    When conducting a Recent Activity Search By User it would be more than helpful to display the IP address of the device that was being used by the user at the time of URL access. We have had a number of occasions where Indicators of Compromised servers have been flagged to us and we need to trace the users and devices that have attempted to access these sites however this is not possible as the search parameters and detail given is not granular enough. The IP addresses are shown when you use a By Suspicious Activity search so the information…

    3 votes
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • sso
    • facebook
    • google
      Password icon
      Signed in as (Sign out)

      We’ll send you updates on this idea

      1 comment  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
    • I suggest that the Sophos Email Appliance be able to support the Microsoft limits for email.

      Currently the SMTP settings on the Sophos email appliance do not support the Microsoft limits. Example: The Maximum number of recipients on the Sophos email appliance only supports 1000 recipients while Microsoft supports 10,000. Can we upgrade the Sophos Email Appliance to support these settings: https://technet.microsoft.com/en-us/library/exchange-online-limits.aspx

      2 votes
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • sso
      • facebook
      • google
        Password icon
        Signed in as (Sign out)

        We’ll send you updates on this idea

        0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
      • All emails that are quarantined should be included in quarantine digests. This includes but not limited to DKIM verification failures under

        Without including all quarantined emails in the digest, how would an end user know if they had a message trapped by the appliance that may be legitimate?

        2 votes
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • sso
        • facebook
        • google
          Password icon
          Signed in as (Sign out)

          We’ll send you updates on this idea

          0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
        • Allow single host route CIDR /32

          Currently it's not possible to add a route to a single IP address (CIDR /32), but the smallest destination CIDR address is a /31. In some circumstances it's mandatory to use a route to a single IP address.

          2 votes
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • sso
          • facebook
          • google
            Password icon
            Signed in as (Sign out)

            We’ll send you updates on this idea

            0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
          • Enable feature for soft restart while updating/adding new WAF policies and changes occured in existing WAF policies.

            Enable feature for soft restart while updating/adding new WAF policies and changes occured in existing WAF policies. Since compete WAF restart may annoying the existing service availability to the customers. number of Financial transaction services being run through reverse proxy which could lead in trouble when you edit or delete any existing WAF rule or services.

            2 votes
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • sso
            • facebook
            • google
              Password icon
              Signed in as (Sign out)

              We’ll send you updates on this idea

              1 comment  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
            • Block custom file extentions

              I would like to see the ability to block custom file extensions and not just the predefined ones.

              6 votes
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • sso
              • facebook
              • google
                Password icon
                Signed in as (Sign out)

                We’ll send you updates on this idea

                0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
              • ssmtp

                I would like the appliance to send emails securely. That is, I could use ssmtp, tls, starttls, for sending alerts and reports.

                Currently you can only use SMTP.

                regards

                1 vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • sso
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)

                  We’ll send you updates on this idea

                  0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                • Show correct error page when Uncategorized category is blocked

                  When a user attempts to visit an invalid URL (does not resolve in DNS) and the Uncategorized category is set to Block on the WS, the user will incorrectly be shown a “Blocked due to category” error page. While the URL is likely ‘Uncategorized’, it would be more correct to show the user a splash screen for “Server Error Page” that explains “The web address you entered could not be found.” The “Blocked due to category” error page allows the user to submit a request for access to a URL that doesn’t exist, creates additional IT work orders, and wastes…

                  2 votes
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • sso
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)

                    We’ll send you updates on this idea

                    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                  • Reports which file type is blocked.

                    Currently if a user has a problem with a certain site because a file type is blocked it is not displayed in the reports.

                    So have to investigate this in the syslog if you have set it up or call Sophos support which takes too much time.

                    Can the reason for the file type block be added in the reports?

                    3 votes
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • sso
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)

                      We’ll send you updates on this idea

                      0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                    • Email Applicance - Possibility to remove Disposition-Notification-To and Return-Receipt-To headers

                      Product "Email Appliance" is not available so posting it hear instead.
                      Sometimes we receive e-mails which have the headers "Disposition-Notification-To: " and "Return-Receipt-To: " set.
                      I would like to remove those 2 headers (only for certain recipients) and sent the mail through.

                      2 votes
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • sso
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)

                        We’ll send you updates on this idea

                        0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                      • To upgrade the Sophos Virtual Web Appliance hardware version to VMX10

                        Hi Team,

                        There are various problems in terms of performance of Sophos Virtual Web Appliance hardware version vmx4.

                        Its always better to be on latest version for better efficiency and performance.

                        Our environment recommended to upgrade the Sophos Web Appliance hardware version from vmx4 to VMX10 but Unfortunately the vmx10 officially you have not tested the hardware version 10 with the Sophos Web Appliance.

                        and its not recommended as of now. could you please test the vmx10 version and make it officially supported

                        Regards
                        Tajudeen

                        1 vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • sso
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)

                          We’ll send you updates on this idea

                          0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                        • download size

                          Set the maximum Downlaod-Size of File in Rules.
                          We want to set a Rule for Users or IPs that control the max. Size of a Download-File. e. g. is not allowed to Download a File with over 25MB.
                          In SiteKiosk we can set this Option, but when the Sophos Web Appliance is used as Proxy, the Download starts and get the hole File (e. g. 100MB) and then SiteKiosk can say: No, Download is to large ...

                          3 votes
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • sso
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)

                            We’ll send you updates on this idea

                            0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                          • Generic block option

                            Generic Block for local site list.

                            This came up when trying to block a website for all our sites except for one.
                            Additional policy was created to allow the site, but to block other sites we changed the Category to something that was blocked. This does not indicate the correct reason.

                            Unable to use global block tag as it has higher precedence.

                            3 votes
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • sso
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)

                              We’ll send you updates on this idea

                              0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                            • Have the ability to modify the Syslog output format

                              The ability to modify the syslog output would be a great feature so that we can tailor that output to a format that works best with our SIEM.

                              3 votes
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • sso
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)

                                We’ll send you updates on this idea

                                0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                              • Include Source IP on Syslog Output

                                Currently, only the username is included in the syslog output. Please add in the source ip as well.

                                1 vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • sso
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)

                                  We’ll send you updates on this idea

                                  0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                                • Sophos Live Connect

                                  Hi everyone, I have enabled Sophos Live Connect on the management server but I have the problem that the list of enabled and then removed clients is not updated, it always stays with the old rumbling entries. Is there a chance to remove these old rumors?
                                  Thank you.
                                  Francesco

                                  2 votes
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • sso
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)

                                    We’ll send you updates on this idea

                                    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Web appliance status to show free disk space

                                    Following an outage that impacted end users through appliance not accepting connections resulting in web pages being inaccessible, requesting functionality to display used and free disk space on (virtual) Web Appliance. It would also be useful to be able to query this using SNMP (see separate Idea submitted by another user in 2012) and/or receive email alerts when disk free space was below a set threshold.

                                    Background is that disk was so full that even after expanding virtual disk, the inbuilt appliance function to expand the disk would not execute because it could not write the necessary scripts to the…

                                    5 votes
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • sso
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)

                                      We’ll send you updates on this idea

                                      0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                                    • SSL inspection by pass for non-standard domains

                                      non-standard domains and sub-domains are ignored for SSL inspection exemption. This makes it hard to exempt corporate trusted domains. example would be "server.itn.shell"

                                      1 vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • sso
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)

                                        We’ll send you updates on this idea

                                        0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                                      • SSL exclusion by subnets to apply when browsing with FQDN

                                        the exception by CIDR range only works for websites requested by IP which is a pointless feature IMO. The exception should apply to sites when using FQDN.

                                        1 vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • sso
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)

                                          We’ll send you updates on this idea

                                          0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Add office365.com to Web Application destinations

                                          Platinum Customer CH2M Hill Companies requests this feature.
                                          Currently we have only Outlook.com categorized as an Web Application. Office365 should also be seen by the SWA as Web Application, especially for reporting purposes.

                                          3 votes
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • sso
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)

                                            We’ll send you updates on this idea

                                            1 comment  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 10 11
                                          • Don't see your idea?

                                          Feedback and Knowledge Base

                                          icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-lightbulbCreated with Sketch.