SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Use Perfect Forward Secrecy for SMTP Proxy

    Use PFS for SMTP Proxy, now it still supports RC4 which is a very weak Cipher.

    51 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    15 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  2. SPX

    Now that UTM 9.2 supports outgoing SPX email encryption i'd like it to also offer the same recipient self registration portal for password management based on user similar if not exactly the same as the existing Sophos Email Appliance.

    I think this would get many of my clients with existing firewall/vpn infrastructure who are also looking for email encryption off the fence and buy into the UTM. Unfortunately the encryption piece as it stands now is a bit tedius and isn't as user friendly as it could be

    13 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  3. SPX Encryption > Receiver Password Portal Setup & Reset

    A way to remove the need for Password Notifications send to User, Administator or Other. An external facing portal page that allows a notice to be sent to the receiver for them to register w/ e-mail verification to setup to access their password for the SPX attachment. Basically allowing a local service similar to Cisco RES for messages sent from your Sophos UTM. Obviously, this could be limited in that if a per-email password is used by the sender it would not be able to work. Also a password reset would only work for future e-mails as the PDF is…

    24 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    8 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  4. Mail Security: Check ZIP / Archive files for blocked extensions

    I need, for example, to block exe files. however, the problem with ASG is that if files with blocked extensions are zipped - even without password protect the archive - they pass, because apparently Astaro only checks the zip file extension (rar, zip) and not the extensions of the files inside the archive, which means that you can bypass the blocking of any files by zipping them first. My only option now is to block zipped files which is not so practical as they may contain legitimate content that I don't want to block.

    208 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    36 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  5. MailSecurity: IMAP Proxy

    Implement an IMAP proxy. Provides filtering and scanning functionality for those that use this type of mail retrieval. It rounds out our offering to include all 3 of the major ways users access mailboxes.

    521 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    83 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  6. Mail Encryption: One-Way / Clientless ( SPX )

    A system whereby customers can encrypt messages with the recipient having no in-place method to decrypt them, such as is currently possible with Smime/pgp setups.. Allows encryption to satisfy needs of many companies that do not havfe setup relationships with key exchanges and such, like Health Care, Government, Education etc... it should be very easy to use.

    43 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Completed  ·  11 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  7. Mail manager: sort by recipient

    from original FR system

    sort by recipient address in mail manager
    Request Date: 11 Sep 2008
    Product: AxG (ASG, AWG, AMG)
    Priority: Medium
    Status: Planned (AxG 7.500)
    Problem to Solve: Cannot sort by recipient in the mail manager.

    Let me explain why it would be useful, often email harvested spam lists harvest the incorrect email address and spam the same incorrect addresses day after day, if you can sort the list by recipient, then it makes easier when selecting groups of email for deletion. In this instance you would not want to keep typing in the incorrect recipient address you…

    2 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  8. SMTP: needs to send over IPv6 as well as receive

    At the moment the ASG will receive email over IPv6 but wont send over IPv6, so destinations with only IPv6 addresses are undeliverable

    2 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  9. 1 vote
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    This is possible in ASG 8.3, and across the WebAdmin has been extended again in UTM 9 with even more options for lists. Enjoy!

  10. Greylisting issues

    if you use the recommended RBL's and then enable ASL's greylisting you will hit double greylisting where the address first gets greylisted by commtouch then gets hit with another rejection by the ASL greylisting. This causes many mailservers to abort everything. either take the grey.ct**out of the reccomended rbls OR remove the ASL greylisting. Another option is to disable ASL grey listing if the "recommended RBL's) are being used to avoid this.

    4 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  11. MailSecurity: TLS needs chained certificate

    We need to do TLS encryption with a valid certificate, but most certificates you buy these days are part of a chain, which the astaro does not support.

    We have an Urgent business case for this too as our customers are mandating taht we use it.

    7 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    7 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  12. outbound smtp spam protection

    Currently outbound mails are scanned only for virus, it would be great if ASG can scan outgoing mails for spam, this would protect the domain getting blacklisted

    1 vote
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  13. Add Rejected Emails to Quarantine Report

    Is it possible to create a daily report about rejected e-mails and to send it via e-mail to an administrator. I mean that list, that you can see in the mail manager under SMTP Log, Result Filter "Rejected".

    3 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    As mentioned, this is already possible via the “Mail Log” in the User Portal. While not in the quarantine report per se, the information display in the Portal is very comprehensive and solves this problem.

    Your astaro partner can help you configure this if you need assistance.

  14. Allow Availability Groups as SMTP Smarthost

    Allow Availability Groups as SMTP Smarthosts. This is sometimes requested by customers to avoid mail congestion due unavailable Smarthost

    4 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  15. Mail Securty: "require TLS" for certain domains

    for ensuring encryption of transmission with certain customers / partners it should be possible to set TLS as "required" for certain domains.
    Otherwise you can't guarantee that transmission is encrypted - you don't even realize when mails are sent plain-text for some reason.

    13 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    6 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  16. backscatter feature

    I'm facing in these days with SMTP proxy. It seems that backscatter feature is missing. It is useful for blocking bounce messages caused by spam (ie: you receive ndr mail caused by not delivered email spam, in which you are the sender).

    More details here: http://en.wikipedia.org/wiki/Backscatter_%28e-mail%29

    3 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Gert Hansen responded

    This is already implemented. you can BATV to sign outgoing messages and with that you can allow only the bounces from messages you sent.

  17. SMTP Relay send the E-Mails through IP-Adress

    There sould be the possability to adjust the SMTP Relay to send the E-Mail's through the selected public IP-Adrress, so the IP of the MX-Record and the PTR Record from the Public DNS mates together.

    4 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    As Bob stated, this is already possible to adjust the outgoing mail address using SNAT. If you need more help with this, ask the community at www.astaro.org or open a support ticket if you are a customer.

  18. mailmanager: refresh button in SMTP-Spool and SMTP-Log

    For checking emails in MailManager near realtime ore troubleshooting there would a refresh button in the SMTP-Spool and SMTP-Log screens very helpful.

    7 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  19. Mail manager not to time out Astaro log in

    Change the system so that while you are working in Mail Manager it does not time out you astaro log in, which shuts down the Mail manager.

    3 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
    Completed  ·  Angelo Comazzetto responded

    This timeout is part of the ASG WebAdmin timeout (as you are part of the WebAdmin level) as such you can get a longer duration just by increasing the WebAdmin timeout value via the Settings Page.

  20. change the rbl lookup

    from sbl-xbl and pbl to zen to cutdown the requests.

    3 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Completed  ·  2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.