SG UTM
Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.
-
allow local ssh to EMA
allow local ssh to EMA
3 votes -
Historical SMIME Certificates
If I change an existing Certificate to a new one we're loosing the ability to decode received mails for a longer time. Many Business Partners have the old one and are using this for encryption. The UTM is no longer able to decode until an Key exchange took place.
10 votes -
IMAP Proxy for UTM/SG 9
Implement an IMAP proxy for UTM/SG 9. Provides filtering and scanning functionality for those that use this type of mail retrieval.
IMAP becomes more and more important for mail clients. The use of POP3 declines. On the other hand, threads caused by malicious mail attachments like crypto trojans or macro viruses are more dangerous than ever. By not implementing sufficient security for IMAP protocol Sophos leaves an increasing part of UTM/SG customers alone.70 votes -
Notify user of quarantined outbound messages
Right now users are only notified of inbound quarantined mails through the quarantine digest. If an outbound mail gets quarantined (e.g. because the attachment is unscannable) no one, not the sender, not the recipient, not the administrator gets notified about this. The mail therefor sits silently in the queue until it is pruned according to the quarantine settings. Such mails should at least be included in the quarantine reports, if not in even in separate notifications.
4 votes -
Quarantine reports are useless with RETURN TO rather than FROM
I have reported this in the past... and maybe others are on cruze control or dont care.. or havent seen a REAL quarantine report... but your current QUARANTINE report from the SG box is absolutely useless as it is written. Please take the time to read this instead of just waiting on votes. This is a real problem.
Currently the quarantine for both XG and SG units records and shows the mail header field 'RETURN TO' as the FROM address in quarantine and mail log screen. In many cases, this makes the interpretation of those emails impossible prior to releasing…
3 votes -
Shud be a Feature to block spam emails instead quarantine, if its with diff IP, Subject but if email body contains Repeated Words
There should be a Feature added to Block the emails with email body Containing some repeatedly words. As for example, on of our client receives email with different ip's, different subject but always the body contains the letters "Canadian-Pills" and he always asks us to block it. When contacted Support, they asked us to either block Domain, IP from where they are receiving.
2 votes -
UTM\SG Test for Document, PDF, EXCEL and exec file on Sophos Side
It can be very convenient to have option Open\Review file on Sophos UTM /SG side before download to computer and review file.For example you received a file and customer not sure if there some mail-ware to another threads, he can actually review file directly in Sophos UTM\SG or file will be transferred to Sophos LAB and reviewed there by a same user.Just Emulation of OS where you able to review files
Is not Sandstorm it actually emulation on files2 votes -
More detailed Mail Exception Configuration
Allow to configure exceptions for extension blocking for single extensions.
Actually it is only possible to create an exception and disable extension blocking at all. For special recipients it would be helpful to allow for example exe-attachments, but still block all other extensions.
Furthermore it should be possible to create exceptions and combine sender AND recipient address. Actually it is only possible to filter for sender OR recipient address.
7 votes -
Adding exception for unscannable/encrypted mails
only be able to either turn of antivirus check or manually sifting through unscannable attachments is a pain either way
8 votes -
Email Quarantine Report
Increase the number of available Email Quarantine Report scheduled times or have the F/W email users as their messages are quarantined.
Having the quarantine report emailed twice daily causes issues with time critical emails, if they are stopped as false positive.45 votes -
Add the option to report false negatives from the Mail Manager
Whereas is very easy to report a false positive for spam detection, it is incredibly convoluted to report a false negative (https://community.sophos.com/kb/en-en/115670). Please add the option to report false negatives from the Mail Manager as well.
4 votes -
In Anti-Spam, Expression-check everything after DATA or include From
Currently, only the Subject field and the content of the email is checked. Well before V8, maybe in V6, we could add the email address of a departed employee to 'Expressions' to force emails to that person into quarantine.
In most organizations, emails within the organization won't transit the SMTP Proxy. An additional benefit would be that adding the domain would prevent outside emailers from spoofing an internal user in the From field. There is otherwise no mechanism to catch something like the following example that demonstrates a spoof of the company president ordering the treasurer to wire money:
telnet…
90 votes -
Redirect Quarantine Reports to other mailadress
possibility to redirect quarantine reports for e.g. ticketing system to administrator (to not create tickets for quarantine reports)
24 votes -
Managing black list of local Sophos Email Security via Microsoft Outlook Add-In
Sophos Email Protection: Sophos already offers an MS Outlook add-in which allows the users to mark emails as junk mails. When users marks an emails as junk, an email is sent to Sophos Labs, gets analyzed and sometimes the sender is added to a global black list.
We would like to have another option when using this add-in. Whenever one of our users marks an email as junk, we want the sender added to the black list of our locally installed Sophos Email Security, not sent to Sophos Labs.
Other solutions like SonicWall Email Security offer this functionality already.Right…
63 votes -
Add DBL Check in Mail Protection
I suggest you should add support for DBL check on SMTP Antispam Features.
3 votes -
Adjustable response to SPF Records with ~all
We get phishing mail with faked sender!
Examples:mastercard.com text = "v=spf1 include:spf.protection.outlook.com
include:deliverygateways.masercard.com include:external.mastercard.com include:ma.mastercard.com ~all"paypal.com text = "v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com
include 3ph2._spf.paypal.com include:3ph3._spf.paypal.com
include:3ph4._spf.paypal.com nclude:c._spf.ebay.com ~all"The problem with this is ~all
The UTM marks the mail somewhere in the header and forwards it.
This is not good!It would be better if you could adjust the response to such a mail:
reject this mail
accept this mail
treat this mail as SPAM (marked as SPAM)It could thus enable a lot more control over such mails!
12 votes -
Mail Security: Quarantine Report n-times
Instead of the actual crypto locker problems we block all office mime type mails and need a feature to send a quarantine report more often to users
5 votes -
Outlook Plugin for easy handling SPAM
It would be nice to have an Outlook plug-in to report SPAM or false positive SPAM directly in Outlook not only in daily reports.
5 votes -
discover if ,doc attached file contain macro
i'd like to know if is possible analyzer doc file attached to an email and discover if it contain macro and if has it put the message in quarantine
33 votes -
Block TLDs in Email Filter
Would like to be able to block all emails with senders from specific TLDs. Eg. *.win or *@*.win
5 votes
- Don't see your idea?
