SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Improvement suggestion: SNMP sysobjectied and (AP) access points.

    I am requesting a slight improvement change in SNMP for Sophos UTM Home edition.

    Can the sysObjectID be changed to the Sophos sysObjectID?

    Currently its set on the generic Linux one: 1.3.6.1.4.1.8072.3.2.10

    I think the Sophos one starts with: .1.3.6.1.4.1.9789

    I monitor my home net and it would be nice if discovery recognizes my Sophos UTM as a firewall instead of a Linux EndNode.

    Also is it possible to add SNMP to the AP firmware for discovery purposes and simple traffic queries? SNMP query credentials could be either added to the same SNMP config or add a new one under…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  2. dhcp snmp

    Add support to monitor the dhcp leases via snmp.

    Maybe this is easily possible by adding something like this:
    https://github.com/ohitz/dhcpd-snmp

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  3. SNMP: Site-to-Site connection Status

    It would be great to actively monitor (pull) the status of Site-to-Site connections via snmp to include this in the monitoring system.

    Additionally the ability to simply turn a Site-to-Site connection on/off via snmp would help a lot too.

    21 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  4. to include the SMNP capability in the web appliances

    to include the SMNP capability in the web appliances

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  5. Fix snmpd.conf to include sysServices

    When querying any of our UTM devices running 9.509-3 for iso.org.dod.internet.mgmt.mib-2.system.sysServices _1.3.6.1.2.1.1.7.0_ we receive the error "No Such Instance currently exists at this OID"

    This is causing an issue with some network management applications that use the value of sysServices to determine which OSI layers the device supports

    At a minimum, the value would need to be "4" to identify the UTM is rulling as a route mode firewall.

    # Test on device with unmodified snmpd.conf
    snmpget -v 3 -l authPriv -u USER -a SHA -A {Password} -x AES -X {Password} X.X.X.X SNMPv2-MIB::sysServices.0
    SNMPv2-MIB::sysServices.0 = No Such Instance currently exists…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  6. Add support SNMP via VPN without add static routes.

    Copernicus project:

    Add support SNMP via VPN without add static routes. This need works as SSH via VPN, only choose a check box allowing or deny the service.

    Today it is needed add static route pointing to tunnel name.

    9 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  7. 1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  8. snmp

    There's no interface comments shown on IF-MIB::ifAlias (empty). Needs the interface comment (description) for my SNMP monitoring software.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  9. SMNTP

    Hi-- I'm using Zabbix to monitor my environment-- including Sophos UTM where possible.

    One thing I don't seem to see is a way to monitor the status of ipsec site-to-site vpns using snmp traps. I can get either a [WARN-726] (a site is down) or a [INFO-726] (a site came up)... but I don't seem to get info on WHICH tunnel.

    Since I currently have 35 site-to-site vpns running through this thing "the vpn is down" isn't a very helpful alert.

    By contrast, if I have email alerts for the same event turned on, I get something like:

    VPN connection…

    43 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  10. Enable override of the the default SNMP system description

    Many SNMP monitoring tools show the system description (sysDescr.0). By default this is pretty useless: "Linux my.hostname 3.3.8-56.h79cdcd-smp64 #1 SMP Fri Mar 8 11:46:42 UTC 2013 x86_64". Would be nice if the web admin interface allowed you to define your own friendly description which was accessible via SNMP.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  11. Monitoring : Define SMTP Trap Intervals

    Possibility to define intervals for sending SNMP Traps . Per Example a Site to Site VPN is down, i would like to add sending an interval of Traps every 30 min until the VPN is on again etc.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  12. Add support SNMP service to multiple WAN interfaces.

    Today this makes is impossible an efficient monitoring of appliances (Copernicus) with multiplpe WAN interfaces. The SNMP server only works through a unique WAN interface.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  13. Add support SNMP Community answer to any (0.0.0.0) IP Address

    Copernicus project:
    Today it is needed create one Community to one specific IP address.
    It is impossible create two 'Public' communities by example to two different IP address or create a single Community String for any (0.0.0.0) Ip address.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  14. Notification when UTM clients are not relicensed

    notification from SUM when sophos UTM clients are not relicensed on their monthly cycle. Email notification would be good.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  15. SNMP: Poll for current Cluster Status via SNMP

    We have a lot of systems which we all monitor via Nagios / Icinga.
    Some of the Systems are also Cluster Firewalls and they give us the posibility to check the cluster status via SNMP.

    Is it possible to become a SNMP OID to check the cluster status?

    Eq... 0 all OK....1 Master Down... ***** now Master... ect

    41 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  16. All Trap Adress should be readable through SNMP

    All MIB OIDs for SNMP Traps should also be readable via a SNMP Request. So you can get the whole Status of your UTM via SNMP Poll

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  17. RAM Usage in percentage

    I would be able to use SNMP to monitor the RAM Usage in percentage, as displayed in the UTM Web GUI. With the current OIDs I can get only some basic values for system memory and I need the (exact) value for the RAM Usage in percentage.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  18. SNMP Monitoring for Astaro-Wifi

    it would be nice to Monitor the Astaro Wireless Networks: How many Users are logged in, signal strength and so on...

    15 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  19. 2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  20. improve monitoring of inbound Internet connection

    Need to extend monitoring ability of NIC to WAN to ISP connectivity. When the ISP (i.e. Comcast) disconnects they provide you with no details. Need UTM to provide better / more complete logging method to identify that the UTM is Not the point of interruption. This detail is needed to force ISP to fix their problem as well for improved UTM / Intranet considerations of config.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.