SG UTM
Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.
-
LZO Compression in SSLVPN is deprecated
Hi,
the compression used in utm is marked es deprecated. When you use .ovpn file on Mac with "Tunnelblick", you get this warning with a new ordered firewall. uncool...
https://community.openvpn.net/openvpn/wiki/DeprecatedOptions#Option:--comp-lzo
11 votes -
Quarantine mail contains only reason "File-Extension" but not which extension exactly
We have configured the system to quarantine emails with certain extensions.
However, the recipient then only sees the quarantine reason "File Extension" in the notification. It is urgently desired that he also sees directly which file extension it is. The admin only sees this in the mail manager12 votes -
Add options to reject or quarantine emails that fail or have invalid DKIM
Currently, even if an email fails DKIM verification it is delivered. There should be, at the very least, an option to quarantine emails that aren't successfully verified. Also see https://community.sophos.com/products/unified-threat-management/f/mail-protection-smtp-pop3-antispam-and-antivirus/112950/dkim-verification/.
20 votes -
DHCPv6 Prefix Delegation for Subrouters
The possibility to re-delegate a ISP-Prefix to Subrouters behind the Sophos UTM.
Scenario: The Sophos UTM is on the edge of the Network an gets a /48-Prefix. The UTM has to re-delegate a smaller Prefix to Subrouters via DHCPv6-Prefix-Delegation.
3 votes -
Require YouTube Educational Features for UTM9
Require YouTube Educational Features for UTM9
Add a feature to allow only educational youtube to users.
3 votes -
Request for sandstorm scanning to support Optical disk image ISO, IMG, BIN. etc.
Hello Team,
We have customer here requesting for sandstorm scanning to support Optical disk image ISO, IMG, BIN. etc. under email appliance. For your assistance please.
Thank You.
2 votes -
Option for checking always emails with file attachment via the sand box /sandstorm
Option for checking always emails with file attachment via the sand box /sandstorm
2 votes -
Add mobile app "Toggle" to Application Control in UTM.
Please add the mobile application "Toggle" to the list of Streaming Media in Application Control in the UTM. Staff are misusing the bandwidth to watch dramas during office hours and neglecting their duties.
2 votes -
Let's Encrypt Wildcard Integration
Let's Encrypt Integration came with UTM 9.6. That's great!
You should now implement the support of Let's Encrypt Wilcard domains with ACMEv2.
Best Regards
48 votes -
restrict machine to log in on remote access vpn if it do not have any sophos agent installed on the machine
Customer is requesting to have restriction for the machine to log in on remote access vpn if it do not have any sophos agent installed on it. For your assistance please
4 votes -
E-Mail Exception for encrypted attachments
It should be possible to create an exception for encrypted attachments without having to disable the malware scan.
22 votes -
Active Directory
When the UTM is sync with Active Directory, it would be nice for the UTM not to keep old Active Directory accounts within the UTM device, and for the ability for the UTM to keep upto date users from AD when the UTM does a sync,
as we are a school and we use the utm for the filtering / authentication - having to go through over 1000, accounts and remove them from the utm device is somewhat time consuming, if this could be added as a feature it would be really great and i'm sure other people would agree.
…
19 votes -
Allowing only facebook messenger but facebook app blocked
Block facebook app but allowing facebook messenger app only via app control.
3 votes -
Dark Mode
Actually, every program has a DARK MODE. Windows has it, One Note has it, Word has it, the UniFi Controller has it...
Why not the Web-Interface of the Sophos XG Home?!?
5 votes -
Google secure LDAP client for user authentication
Please implement Google secure LDAP client (with cert).
We have to install a LDAP proxy like sTunnel to connect to Google secure LDAP for user authentication in UTM. This could be avoided.8 votes -
Wireguard VPN support
I'd be nice if you would include WireGuard in your suite of server-side VPN protocols in your UTM line.
75 votes -
Perform checks when creating host definitions
"security made simple" is a vital aspect of network security and in keeping with that model I suggest the following checks while creating host definitions:
- When creating a host with an assigned IP, the system should check if that IP is already assigned or not. In a large scale network even though you can search and sort host definitions, it is prone to human error and therefore proper rudemantory checks by the system during creation should be performed.
1.1 one should not be able to create a host with an IP within a dynamic range
1.2 one should not be…
3 votes -
1 vote
-
vpn
Please block Star VPN. It is connecting on the user machines and they can browse freely.
Thanks1 vote -
Please block Star VPN under Proxy VPN
Hi there,
Please add Star VPN under proxy VPN.
Thanks1 vote
- Don't see your idea?
