Secure Web Gateway

Suggest, discuss, and vote on new ideas for Sophos Web Gateway. Complete web protection everywhere.

Secure Web Gateway

Suggest, discuss, and vote on new ideas for Sophos Web Gateway. Complete web protection everywhere.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. To upgrade the Sophos Virtual Web Appliance hardware version to VMX10

    Hi Team,

    There are various problems in terms of performance of Sophos Virtual Web Appliance hardware version vmx4.

    Its always better to be on latest version for better efficiency and performance.

    Our environment recommended to upgrade the Sophos Web Appliance hardware version from vmx4 to VMX10 but Unfortunately the vmx10 officially you have not tested the hardware version 10 with the Sophos Web Appliance.

    and its not recommended as of now. could you please test the vmx10 version and make it officially supported

    Regards
    Tajudeen

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  2. Web appliance status to show free disk space

    Following an outage that impacted end users through appliance not accepting connections resulting in web pages being inaccessible, requesting functionality to display used and free disk space on (virtual) Web Appliance. It would also be useful to be able to query this using SNMP (see separate Idea submitted by another user in 2012) and/or receive email alerts when disk free space was below a set threshold.

    Background is that disk was so full that even after expanding virtual disk, the inbuilt appliance function to expand the disk would not execute because it could not write the necessary scripts to the…

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  3. websocket support in SWA

    Hi..

    customers would like to have websockets (RFC 6455) being supported/transported by the SWA.

    Thanks a lot for considering!

    Kind regards..
    uɐɟǝʇS

    (Sophtrac 7432710)

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  4. Searching feature when end users browse through the list.

    The list of logs that were quarantine could be many 1000 messages and it would be convenient if users can find a specific email that was mistakenly placed in the quarantine log by entering sender email or subject of the message.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Please add "WeTransfer" as WebAppliacation in SWA

    "WeTransfer" should be available in WebAppliaction on the SWA.
    Please add the Web Application control for this webservice on the SWA!
    (Due to customers request Sophtrac 7041991)
    Thanks for considering!
    Kind regards...

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  6. Allow mDNS/Bonjour on the local LAN to work in the browsers.

    Allow mDNS/Bonjour on the local LAN to work in the browsers. The web protection currently blocks them for no apparent reason.Put an option in the software to allow mDNS to work, it IS the age of iOT after all.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  URL Categorization  ·  Flag idea as inappropriate…  ·  Admin →
  7. Logging of all requests hitting the web proxy

    It would be really handy if the logs showed failed authentication, or the option of showing these. If there are any other requests that hit the proxy which it ignores show these too.

    Resorting to packet capture on the client I think is over the top. It also can cause wasted time as presently as authentication exceptions put in like others do not always work for what ever the reason.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  8. Allow individual users to be able to download certain extensions from individual websites

    We would like to be able to allow individual or a group of users to be able to download a file type from a certain website only.

    for example if ZIP files are blocked from being downloaded, however we have three users that often download from dropbox. We would like to allow these three users to be able to download ZIP files from dropbox only.

    24 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    7 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  9. SWA: Add support as a web application Skype Web (https://web.skype.com)

    Add support to Allow Skype Web (https://web.skype.com) in the "Web Applications" instead of allowing the whole category: chat.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Under Review  ·  1 comment  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  10. Ability to clear DNS cache via Web Interface.

    Ability to clear DNS cache via Web Interface.
    A simple button similar to the Clear Cache button to clear DNS information.
    At the least a option on the console (CLI) could be added to clear this.

    If important business related websites change
    IP addresses the SWA will continue to use old DNS/IP information until
    cleared or TTL is reached. This causes major issues if the SWA is the only
    internet gateway. Clearing/Refreshing DNS requires a Sophos Console Support
    session. Clearing the cache should be a simple process.

    16 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  11. Enable Kerberos Support for Windows Clients

    Currently all authentication between Windows machines and the Sophos Web Appliance occurs using NTLM, we would like to move to using only Kerberos.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  12. Support vMotion

    Support for vMotion should be added to the product. A huge proportion of customers require vMotion on their virtual hosts at which point they are running an unsupported configuration.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  13. Granular Control Over Cisco ShareFile

    We have a lot of clients that use Cisco ShareFile. We'd like to have the same control over that site that was added in the last patch for Dropbox, Google Drive, and OneDrive.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. automated backups require a more secure method than FTP

    As part of our PSN submission it came to light we were using ftp to backup our sophos ESC appliance. It was required that we use a more secure method such as sFTP which the sophos ESC appliance doesn't support. We have had to stop using automated backups.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  15. X-Forwarded-For feature for web appliance

    organisation uses the Google Apps suite quite heavily. We put so much load to them that they end up putting Captcha verifications on searches as per this doc: https://support.google.com/websearch/answer/86640?hl=en

    A way to mitigate these things from happening in scenario’s where organisations may have all of their traffic exiting one or two public IP’s is to implement the X-Forwarded-For into the HTTP header. It means that the web server in question (eg Google) can differentiate between one client and the other.

    13 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    8 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →

    We have implemented a back-end feature to add X-Forwarded-For headers to HTTP requests in version 4.2.0 of the Web Appliance. At present it must be enabled by Sophos support but we are considering adding it as a UI option in the future.

    Note that this feature only works for non-secure HTTP so it may not help for the Google situation where the default is for traffic to use HTTPS. This is because with HTTPS, the headers are all part of the secured, encrypted communication within an SSL tunnel. There is no equivalent protocol that would work on SSL traffic.

  16. Exempt URLs from caching

    For Web Security. A feature that will allow administrator to manually add/ remove URL to be exempted from being Cached in WS products.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  17. Category request: Split the Proxies & Translators Category

    Customer requested that these two items be split into separate categories as they would be unrelated for the most part.

    13 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  URL Categorization  ·  Flag idea as inappropriate…  ·  Admin →
  18. Block upload of attachments to webmail servers

    At the moment Web Appliance can only block downloads of certain files. What the customer wants is to be able to block uploads of attachments to webmail servers like Yahoo, Gmail, etc. BUT allow sending of emails. So emails can be sent but no attachments.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Started  ·  0 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  19. Re-Run Scheduled Reports

    On the web appliance, it would be nice if you could mass select your scheduled reports and "run now" or "run again". We hit a snag where the mail server wasn't available during the 1st of the month reporting and previewing, then saving, then manually emailing...

    A, added bonus would be to add a change of criteria like a new date range.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Reporting  ·  Flag idea as inappropriate…  ·  Admin →
  20. Web Appliance: Allow skype with the HTTPS Scanning on

    When HTTPS scanning is enabled, Skype fails to work because it is trying to send non-HTTP traffic over the SSL tunnel.

    It is essential to be able to scan https sites and also essential to be able to support messaging apps, in particular Skype and iMessage. For Skype – maybe even setting up a simple SOCKS proxy on the Web proxy might do the trick, we do not need to examine or track the contents of the Skype messages." case 3693911

    24 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Web Appliance  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.