SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

Suggest an Idea...

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Remove support for TLS 1.0/Allow it to be disabled.

    PCI scans that see a remote access port open to the internet fail because the appliance still supports TLS 1.0. I have to dispute this every time, and it is a real hassle.

    87 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    16 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  2. Reset a device to factory settings using a paper clip

    When a Sophos UTM device is rendered inoperable due to a software or configuration problem, provide a means to reset the device to factory settings by using a paperclip to press a reset button. Like a Airport express device or many other electronic devices, it should not be possible to press the reset button accidentally.

    When the reset button is depressed, beep several times, format the internal hard disk, install the software from an internal flash drive, or hidden recovery partition and when done, beep several times to notify the user its done.

    When the system is restored, permit the…

    40 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  3. Firmware-Fallback

    After the momentary dissaster with 9.410 (and 9.411) it would be great to have the possiblility to switch back to the latest working version without any factory-reset.
    Two different partitions. If the update goes wrong, switch back to the functionaly version.

    38 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  4. SG / XG / RED with integrated WAN Modem / Slot for WAN-Modem-Module (DSL / Cable / LTE / GSM / etc)

    New SG / XG / RED with either integrated WAN Modem (for example DSL / Cable / Wireless) or with an Slot (like FleXiPort) that could handle WAN-Modem-Modules (DSL / Cable / Wireless like LTE, GSM, UMTS, etc)

    21 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  5. sd wan

    Please tell us does Cyberoam supports SD WAN Feature.

    Fortigate UTM supports same.

    Secure direct Internet access for Cloud Applications for
    improved latency and reduced WAN cost spending
    Effective, cost-efficient and high performance threat
    prevention capabilities
    WAN Path Controller and Link Health Monitoring for better
    application performance
    Security Processor powered industry’s best IPsec VPN and SSL
    Inspection performance
    Centralized Management and Zero Touch deployment

    Our clients are asking for SD Wan feature.

    Please update us for same.

    19 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  6. RED: High Availability Unit Support

    Option for usinig two REDs in active/passiv config. If one RED fails the other will be online.

    Case:
    Customer has two Internet Connections, and wants to have two REDs. (It is a must cause of possible HW failure). There should be an automatic switch from one RED to the other and back. (both RED are connected internally to the same switch)

    18 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Under Review  ·  3 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  7. Sophos 24/48 port switch (with poe options)

    Please think about making a 24/48 port witch that has some integration into the utm box (Similar to the ap30) that would give me stats on my network and allow me to troubleshoot admin from one login.

    14 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  8. ASG Appliances: Hardened Version with Flash RAM

    Providing ultimate reliability and recovery, If Astaro OS and configuration files can be stored on a non-volatile solid-state disk or RAM. In the event of a hard disk failure, the solid-state disk or RAM allows the system to continue its operations.

    It is secondary that a System recovery be a matter of installing a new hard disk and initiating the recovery if hot swappable HDD option be available also to lower models to the likes of ASg525 and 625. The system automatically restores itself to normal operating state.

    11 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    6 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  9. remote power on

    most of our SG's are in a datacenter. It would be nice to have a feature to power off/on a UTM (like the old HP ILO of Celestix IPMI interface).
    If an UTM somehow is powered off we now need local support in the datacenter to do a powercycle.

    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  10. Scheduled restart of SG units

    It would be nice if it was possible to schedule a reboot of the SG unit/virtual appliance.
    During a period of time the software consumes about 20% more memory than at reboot

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  11. Add driver support for Intel X710 Virtual Function

    Add kernel support (i40evf) for newer Intel X710 Virtual Function. Actually, there is a driver for older X520 Intel Virtual Function (ixgbevf), but no module for newer cards... It allows to use SR-IOV in virtualized environment, which provides a huge performance boost on network adapters supporting it.

    Intel provides a configuration guide to use SR-IOV with X(L)710 cards :
    https://www.intel.com/content/www/us/en/embedded/products/networking/xl710-sr-iov-config-guide-gbe-linux-brief.html

    Thanks,
    Nicolas

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  12. Sophos Management Appliance SNMP Monitoring

    Hi,

    A Platinum customer has requested that we have a SNMP Monitoring feature that we can set/enable within the Sophos Management Appliance (SMA). This does exist on the Web Appliance's but not on the SMA.

    They would like this feature so they can be informed of the Health of the device as they recently had an issue where it ran out of resources (backed-up data since 2013).

    Regards,

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  13. ASG Hardware: Rear USB Ports

    Hi,
    with ASG220 rev4 the USB ports on the backside of the ASG got lost.

    This is not very useful, because know I have to put UPS and KVM cable to the front.

    Please have 2 USB Ports on the backside again.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  14. Request to fully support Skype for Business on the Web Appliance

    Request to fully support Skype for Business on the Web Appliance

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  15. ASG Software - support Realtek 8179 WiFi for home users

    I think this card should be already available in the stock 3.12 kernel. Would you please compile and include it in the ASG?
    I'm using at home the ASG Software 9.352-6 installed on a Shuttle barebone. I'd like to make WiFi working with integrated Realtek 8179 WiFi mini PCIe card.
    lspci -vv:
    01:00.0 Network controller: Realtek Semiconductor Co., Ltd. Device 8179 (rev 01)
    Subsystem: Realtek Semiconductor Co., Ltd. Device 8179
    Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
    Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
    Latency: 0, Cache Line Size:…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  16. Built-in UPS for UTM/RED

    Some industrial and small form factor PCs are now being offered with an on-board UPS so that no extra hardware is needed. Building this into the smaller UTM appliances and the RED would help to make the devices even easier to deploy and manage.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  17. Disable the need for root password for fsck on boot when filesystem is not clean/damaged after power outage. Automate fsck process on boot.

    Our UTM120 did no longer boot and upon connecting a screen we notice it was asking for the root password to perform a manual fsck on /tmp

    As the default setup on the UTM does not have a root password set we were unable to repair the filesystem and we experienced quite some downtime before we were able to reset the root password and repair the filesystem.

    Is it possible in a future update to address this issue ? Automatically repair filesystem errors on bootup ? Skip fsck on /tmp ? Allow fsck to be performed without root login ?

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  18. Create a cheaper UTM based on the tilera platform.

    Create a cheaper UTM based on the tilera platform 9 core cpu or higher. The Mikrotik products that I use have inspired me to request this. I know its lofty but it just seemed like a good idea.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  19. Appliances: Tighter power connector for UTM 1xx-series

    The current power connector is not reliable since it easily can fall out.
    I would prefer to have a connector with a lock, like the TE Connectivity VAL-U-LOK. Other firewall brands, like Fortinet for example, uses that type of contacts.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
  20. Make it possible to export the spx database from one appliance to another, we are migrating services from a SEA to a UTM.

    We would like to be able to export the spx database from our SEA to our new UTM.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.