SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Encryption free zones / APT detection

    It would be nice (not sure if technically possible) if there was the ability to detect and block known encryption techniques on the local LAN.

    Discussed here http://searchsecurity.techtarget.com/tip/Using-crypto-free-zones-to-thwart-advanced-attacks

    Advisories use encrypted tunnels to communicate with C&C servers. The blocking/Alerting of any kind of none white-listed encryption would help prevent C&C communication and signify infection.

    Any device requiring encryption would need to be white listed, other connections (like web browsing) would need to be performed by the UTM.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  2. telegram

    A filter for Telegram messaging app

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  3. Combine Application Control and Packetfilter Rulebase

    Please combine the rulebases for packet filtering and application control. So that application control would just be an additional option to a packet filtering rule.

    This would make it much easier to configure packet filtering and application control in a consistent manner.

    The following request would be obsolated by this approach, because it would be an "any/any-allow" rule with application filtering enabled: http://feature.astaro.com/forums/17359-utm-formerly-asg-feature-requests/suggestions/3457198-application-control-ability-to-allow-applications

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  4. Block the UltraSurf Proxy

    A lot of users are using the UltraSurf Proxy to bypass the the Network proxy and access the blocked sites like youtube and facebook and ***** websites.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  5. Move the DELETE icon away from Deliver and Refresh.

    Here is a great idea... Move the DELETE icon away from Deliver and Refresh. If your not paying any attention you could deliver the spam. Also it would be nice to have a Delete ALL icon to save time from going from page to page to delete.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  6. Route All traffic from Endpoint to UTM Proxy (like TMG agent)

    At this moment (UTM 9.2), Sophos Authentication Agent have only one function - map IP and User.

    But TMG customers like to use a TMG agent, which can route all outbound traffic from host (not only http/s) to TMG proxy.

    If we will have such functionality, this will allow us:
    - have all traffic on UTM from host (even UTM not as Default GW).
    - use this agent for Terminal servers (separate different users by ranges of ports).

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  7. Command & Control summary

    Need log of bottom percentage of traffic to evaluate its potential as C&C residing on the network.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  8. Support EAS Proxy functionality in UTM

    Sophos Mobile Control has a component to block mobile devices, which are not compliant, from accessing the Exchange ActiveSync interface of an Exchange server. It would be nice to have this integrated with an UTM, which is placed on the network edge anyway. This would be one server less and would deepen the integration between the two products

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  9. Add Teamviewer portable to application control

    Add Teamviewer portable to application control

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  10. Add the ability to limit number of hours on a application or application group

    The ever increasing demand for our users to have access to you tube, social media or even gaming sites (during lunch hour, hopefully) creates an administrative burden and HR nightmare for many employers. I would suggest that having the ability to limit the number of hours spent by a user or dept on a weekly or monthly basis would be an invaluable tool. This way you can create what is deemed an acceptable number of hours based on a users organizational responsibilities and only have to monitor by exception. This would also be applicable in a home setting where a…

    9 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  11. canonical.com updates application control for QoS

    limit ubuntu clients to have a upper limit of bandwidth when downloading updates from canonical.com. Right now DNS Group only resolves one ip address when using dns group canonical.com.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  12. Enhance Application Control App Categorization

    Lot of people would like to be able to easily block advertisers, web trackers and analyzers to enhance their surf experience in general and to enhance privacy too by blocking all those trackers and analyzers.

    There are already >150 of such advertisers, trackers and analyzers as apps in the UTM's application control. Sadly all of them are categorized as "web services", which is misleading andunhelpful, as in this category are also CNET and Mozilla downloadservers, CDN's as Akamai etc., whic disallows a simply general block af that category.

    I propose, that this "web services" category will be splitted further into …

    239 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  13. Application Control

    Deskshare is missing

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  14. Add Ultra Safe and IDM into the Application Control list

    Currently, we are performing a UTM 625 POC at Ministry of Culture of Thailand.
    They are requesting for additional applications to be controlled by the UTM.
    The applications are (1) Ultra Safe and (2) IDM or Internet Download Manager.
    Please kindly consider our request since this project is very large and we foresee a good fortune on this opportunity.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  15. App Control: Enforce control by specifying Network Ranges.

    It would be nice to be able to define a IP Network Range in the Application control. Rules can be configured in the Application Control to allow or block access to users in this IP Network range.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  16. allow IM, but disable file transfer and all other extra function. Add message that you're being monitored or ay other custom message in.

    allow IM, but allow fine tube control, such as disable file transfer and all other extra function. Add message that you're being monitored or any other custom message in chat window. allow logging of conversation. if they don't want to be logged, stop chatting.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  17. Puffin Browser - add to Application Control List

    Puffin Browser allows students and staff to bypass the web filter- this poses a significant security risk. Adding Puffin Browser to the Application Control list would help with maintaining security and website restrictions.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  18. Please add in Sophos UTM in Web Protection>Application Control>Application Control Rules the new application control for Vk.com (vkontakte)

    Please add in Sophos UTM in Web Protection>Application Control>Application Control Rules the new application control for Vk.com (vkontakte.ru). This is the Russian equivalent of Facebook. The feature could be really useful

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  19. Add "Protocol 58" to Application Control >Networking

    I would like to Monitor ICMP v6 Protocol 58 across the networks.
    Using the Application Control would give a good and clear picture of what is happening and how much traffic.
    Thanks
    Mark

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  20. Add "Wetransfer" to Application Control > File Transfer

    I see many services under "application control" > "file transfer", 110 actually, but besides services like YouSendIt I miss Wetransfer.

    Can you please add it?

    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.