SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Logical DMZ

    Suppose I have one device which needs unfettered access to/from the web. If my machine is out of NICs, I cannot dedicate a NIC to a DMZ "network". I just want to allow one particular device to come and go without restriction. It would be nice to be able to logically DMZ a host based on IP or MAC address for that purpose.

    NOTE: I am aware that I can create IP Filter rules and DNAT rules for a host to have seemingly unfettered Internet access, but trust me... that does not work for some devices. I have tried... several…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  2. Networking: Multipath WAN rules by Application

    It would be great If we could assign our Adsl line for all P2P software, (or dedicate line for skype and other IM) while keep our main line clean for business. Today it's possible to achieve it only by port assigning, not by Layer 7 pattern.

    30 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  3. OSPF support for IPv6

    Much easier to use OSPF rather than static routes...

    18 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  4. PoE port on 110\120 or Red Device

    With it becoming more common to have VoIP phones in home offices it would be an added benefit to have a PoE port on one or more of the 4 Ethernet ports on the ASG110\120 or Red Device. Additionally it could be used to power a single Astaro wireless access point for a small or home office.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  5. SCEP Suport

    Hi,

    I would like to have support for SCEP in Astaro. Is this at all possible ? It would be a great enhancement for Astaro in the enterprise especially with all the mobility you see now.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  6. Networking: DHCP Release for Interfaces

    Like an interface configured as a DHCP Client that has the "Renew" button. I'd like to see the addition of a "Release" button that performs a proper DHCP_RELEASE such as performed by "dhcpcd -k <interface>"

    9 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  7. OSPF in Clustering Mode

    Currently routes that are learned by OSPF are not installed into the routing tables of slave/worker nodes. Having OSPF routes propagate from the master node to slave/worker nodes would make things easier to configure in a complex network rather than trying to maintain static route tables.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  8. Support Vodafone VDSL

    Astaro should also support Vodafone VDSL (VLAN ID 132) in WebAdmin

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  9. Networking: Time-Based network interface enable / disable

    Switch a whole interface on or off based on time conditions (i.e. guest network interface switched off during non-office hours)

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  10. QoS - Automatic Traffic Shaper Groups for RED and VPN tunnels

    There is a need for a easier way to make a "fair" traffic shaping for specific services a RED traffic, VPN Tunnels and similar services. Actually it's difficult to set up and maintain working QoS Rules per RED or VPN connection, because every change in topology (new RED devices or tunnels added or removed) requires complete reconfiguration and reassignement of the available bandwidth for these tunnels. In my eyes a good approach would be, if we could:


    • define a Bandwidth Group in ASG to guarantee and limit bandwidth for a group (already possible)

    • extend the Bandwidth group with the ability…
    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  11. RED: Configurable RED Service Port

    I want to set up an Astaro RED tunnel over port 443 and not 3400. Please make this configurable.

    12 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  12. DHCP Static Mapping: Select a Host Definition instead of manually enter the ip address

    Just to avoid to enter twice the same IP address (and to modify twice in case of variation), it would be useful in DHCP Static Mapping the possibility to choose a Host Definition instead of manually enter its ip.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  13. WAN Link Balancing by Volume/Amount

    We recognized that ASG is not able to handle volume based failover for dedicated lines.

    This is a importend feature for our customers

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  14. Suppport ISDN

    ISDN-Interface for Fallback / Emergency / Remote-Configuration Possibilities

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  15. Networking: Support for Cable Modem using L2TP Authentication

    Some Cable ISP require you to use a L2TP login to connect to the Internet.
    We need a L2TP option in the interfaces to be able to do this connection

    10 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  16. AstaroOS: Add tcptraceroute

    To enable more thorough troubleshooting it would be nice to have either tcptraceroute or a traceroute that supports -T

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  17. Authentication: Member Of (Add Groups to User)

    It would be a nice feature if we can add Users to Groups directly by editing the User. (Something like a Member of feature)

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  18. WebAdmin: Grouping controls for DHCP Servers

    Like Firewall rules which work great, it would be nice if you could group / color code DHCP Servers.

    If you use WLAN and RED you'll have a lot of DHCP Servers and there is no chance to group them logical (only possible by a naming schema)

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  19. Networking: Uplink Monitor Action to Restart Unit

    As an augmentation Internet Connection Monitoring, we'd like to have the ability to tell the Astaro to reboot if the internet connection is not available after a predefined interval (say 15 minutes). This would solve issues we have with having to power cycle remote ASG units to get them to reconnect with various ISP equipment.

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  20. Networking: Assign DNS Servers via Interface

    I would like to be able to assign DNS servers to interfaces. Right now it's global.

    10 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.