SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Wireless Protection: QR Code Vouchers for Hotspot

    In addition to passwords for entry via the wireless captive portal, it will help us if QR Codes can be printed on vouchers too.
    Users with smartphones are able to scan the QR code with the mobile phone, which contains an individual URL to activate the session, equivalent to typing in the vouchers passcode in the captive portal.

    56 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Completed  ·  3 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  2. Web Security: File extension blocking inside archives

    the need to block specific file types will have multiple customers and with the Extension-filter it works just under the circumstances that files are not inside an archive.
    There is the need to block these files also in f.e. "ZIP" archives.

    18 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  3. Wireless: Support 5GHz in all access points

    All Sophos AP's need 5GHz connectivity. All professional wireless devices (Notebooks, mobiles ore whatever) are able to connect via 2,4 and 5GHz.
    5GHz technology is more stable as 2,4 GHz and has numerous advantages.

    32 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  4. Wireless Security - MAC Filter

    It would be great if you could implement a MAC Filter that can be configured for each SSID.

    For example don't let Apple devices use the WLAN.

    Greets
    Stephan

    46 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    7 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  5. Remove the 200 MAC address per SSID limit

    Remove the 200 MAC address per-SSID restriction for access control.
    In some situations the complexity of the voucher system is not required and basic MAC address whitelists or blacklists as a simple alternative. However, the limit of 200 addresses per SSID is restrictive in larger deployments. My suggestion would be to remove this restriction, or if a restriction is necessary it should be increased to more than 2,000 addresses.

    8 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  6. Endpoint: Mobile Device Management from UTM WebAdmin

    Would like to control mobile devices (Encryption/ AV/ Remote-Lockdown) from UTM9 Web Admin

    52 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  UTM Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
  7. Networking: USB 3.0 Network Adapter Support

    USB 3.0 LAN adapters are fast 1000 Mb/s and it would be nice if the drivers was added to the kernel.
    Special thoose with Asix chips, they are all over!

    AX88179
    http://www.asix.com.tw/products.php?op=pItemdetail&PItemID=131;71;112

    21 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    11 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  8. Dynamic DNS Provider - DNS-O-Matic

    DNS-O-Matic provides you a free and easy way to announce your dynamic IP changes to multiple services with a single update. Using DNS-O-Matic allows you to pick and choose what Dynamic DNS services you want to notify, all from one easy to use interface. www.dnsomatic.com

    4 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  9. Web Security: Show Block Page for HTTPS Sites

    Hello,
    actually if an HTTPS web site is blocked due to proxy settings (ie. you want to block https://www.facebook.com) the user does not shows the classic "Blocked content page" by Astaro, but he sees a generic browser error. It seems that it happens because of a security modification applied by all browser producers (IE, firefox, opera, ecc). Astaro should conform to these new changes, otherwise all users could think that the website they want to see is not reachable cause of techical issues (generated by their network admin or by remote web site admins).

    I think this request is…

    29 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    9 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  10. Packet Filter: Disable logging for multiple (or all) rules

    It would be very nice, if there were a checkbox-action like "Disable Logging" for selected firewall rules.Everyone who have 100 rules or more knows what I mean.

    13 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
  11. VPN: An SSL-VPN Client for Android

    Would be great to have an installable SSL-VPN client for Android mobiles!

    257 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    45 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    This feature has been released as part of UTM 9.1. Enjoy! We have added support for the new OpenVPN Android (and IOS) client. You can download their free client from the marketplace and connect to your UTM with it!

    After installing the client on your phone, visit the UserPortal and use the new installer on the remote access tab under SSL VPN.

  12. Less noise UTM 220

    The UTM 220 fans are very loud and some customers are not happy about it.
    Please enable fan management in the software for these appliances.
    Maybe in a next revision change the fans and use quiet ons.

    27 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    10 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  13. Notifications: Email Alert for RED Tunnel Status

    It would be good to be able to tell when a RED device has lost connectivity from the ASG/UTM without having the end user telling us or having to log in to the ASG/UTM.

    A Simple email alert would suffice, and would be easy to implement as the Tunnel light indicator would be the trigger for the email alert.

    This could live under the Red Management section of the ASG/UTM interface.

    SNMP does not allow this to happen because of the fact that the ethernet ports on the the ASG/UTM will always remain up because of the Layer 2 nature…

    31 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    9 comments  ·  Notifications  ·  Flag idea as inappropriate…  ·  Admin →
  14. VmWare Tools for Vsphere 4.1

    Provide VMTools for Astaro Virtual Appliance installed on VMWare VSphere 4.1

    16 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    VMWare 4.1 (and u1) is fully supported as of ASG 8.100, and our Software has the latest open vm tools included. Enjoy.

  15. VPN: SSL VPN For iPhone / iPad (iOS)

    In addition to the already-possible L2TP VPN and IPSec VPN, the SSL VPN would be a nice ability to have.

    66 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    11 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    This feature has been released as part of UTM 9.1. Enjoy! We have added support for the new OpenVPN iOS client. You can download their free client from the marketplace and connect to your UTM with it!

    After installing the client on your phone, visit the UserPortal and use the new installer on the remote access tab under SSL VPN.

  16. Wireless Protection: Granular Customization of Vouchers

    To be able to pass on more information to the voucher's recipient it would be very helpful to be able to edit the layout of the voucher or at least have two separate (HTML) text fields for the Hotspot's homepage and the voucher itself.
    At this build (9.003-15) you can only have one text which can be HTML and displays correctly at the Hotspot's homepage, but without any layout (plain-text like without formatting) when "printing" the Voucher's (PDF). In most situations where the connection procedure to WiFi (eg. company or hotel WLAN) is not seamless - when SSID and encryption…

    32 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  17. UTM Endpoint: Cache updates for Endpoint clients on UTM

    UTMs do not cache updates for endpoints so every endpoint does it's own fetch from liveconnect. This is very bandwidth inefficient during maintenance releases/updates.

    25 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  UTM Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    This feature was released as part of UTM 9.1, in that UTMs can now cache Endpoint updates if you have Web Protection and enable the cache feature.

  18. Allow renaming of Network Interface eth0 on virtual appliance

    Currently (i.e v9.004-34) on a virtual UTM, the interface does not allow you to rename the Eth0 network interface from "Internal".

    I have been informed by support that this is not a bug - even though it does not do this on any of the physical appliances that we have.

    I don't know why you would have made a design change like this but please can you restore the ability to rename the eth0 Network Interface because it is not helpful when you have an interface named "Internal" when it is your public internet interface!!!

    Thanks.

    2 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  19. Web Protection: Google App domain controls via HTTP header insertion

    Google supports a ways for organizations to limit which Google Apps domains users are allowed to visit. This is done by adding an HTTP header to outbound requests containing a list of allowed domains.

    http://support.google.com/a/bin/answer.py?hl=en&answer=1668854#providers

    10 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  20. Web Server Security: Support for Wildcard Domain Routing

    It would be great, if you could add " *.domain.com " in WAF.
    So that you dont need to add every single FQDN for every site.

    47 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    9 comments  ·  Web Server Protection  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.