SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Networking: DSCP-Based WAN Uplink Rules

    I´d like to see a service definition based on dscp/tos values to seperate my traffic to different uplinks by tagging it with dscp tag. Currently it is only possible to make bandwidth reservation based on dscp but not routing .

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  2. Usability: Per-User Language Settings

    It should be possible to set a language of a user object. We have support for many languages. By having this feature for example a tech-support agent could login to a firewall which has it's WebAdmin set to Chinese and see it in english without having to change the setting.

    There are many applications such as the UserPortal, Daily Spam Digest etc...

    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
  3. MailSecurity: official CA support for s/Mime Mail Encryption

    it should be possible to use an official CA for S/Mime Encrytion.
    no onlyt to verify external certificates but also to signate outgoing mails.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  4. Mail Security: Stronger TLS Encryption

    X=TLSv1:RC4-MD5:128
    All other customers have TLS encryrtions like this X=TLSv1:DHE-RSA-AES256-SHA:256

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  5. Authentication: Proxy for Authenticating to Local Resources

    Implement an authentication proxy to access a local subnet or vpn subnet for a configurable time.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  6. Notifications: SMTP Host Monitoring

    It should be possible to constantly monitor the status of the SMTP host that gets the mails after they were filtered by the Astaro's SMTP proxy. Is it pingable, is port 25 open? If not, please let my Astaro send me an email over another relay so I get informed that there is a problem and can do something about it.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  7. Mail Security: Adjustable Max Queue Time

    It would be nice if you through the web interface, can change how much time a mail should be stored in the firewall before it reaches the bounce.

    So we have a server that went down on 29/12 but first came up again on 4 / 1, there are now some lost mails, because Astaro V7, only save the mails in 48 hours, and I can not find a way to change this?

    11 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  8. Reporting: Top Peers by Mail Domain

    At this time "top peers by address" shows something like:

    senderA --> recipientA = 10 Mails, 52%, 780Kb
    senderA --> recipientB = 5 Mails, 28%, 1324Kb
    senderA --> recipientC = 3 Mails, 12%, 234Kb
    senderA --> recipientD = 1 Mails, 2%, 1234Kb

    The customer wants to see something like:

    senderA --> recipientA = 10 Mails, 52%, 780Kb
    senderB --> recipientA = 5 Mails, 28%, 1324Kb
    senderA --> recipientC = 3 Mails, 12%, 234Kb
    senderC --> recipientD = 1 Mails, 2%, 1234Kb

    and so on.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
  9. 3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  10. Reporting: Audible Beep when Internet Connection is Down

    Add a check box in gui and appropriate functionality to play a sound or beep when external PPPoE connection is down. This would be useful in cases where an ASG box is only used for remote support without daily use. If the external link goes down nobody might notice until support is actually required.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
  11. Remote Installation Service Point

    Problem:

    When customers need to reinstall their Astaro operating system, they have to have the latest version of Astaro that will match the last known backup. In most cases, reinstalling the operating system and restoring the configuration becomes an extreme challenge when trying to assist a customer through the process. Typically, the customer’s copy of the Astaro software is at least three or four versions older than the backup. Therefore, updates have to be installed onto the unit, prior to re-installing the last known configuration.

    Suggestion:

    What would be really cool, would be to leverage the SSI jump drives to…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
  12. Add Notifications with RSS Feeds

    It would be nice to have the possibility to send notifications not only with email and snmp, but also via Feed RSS. In this case admin should set the interfaces/ip address authorized to access to this feeds. It is a non invasive way (such as mail) to notificate important events to admins.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Logging  ·  Flag idea as inappropriate…  ·  Admin →
  13. Mail Security: SMTP Routing via LDAP

    You have an address like @domain.com with some mail server behind your Astaro.
    The mail server have different primary domains, domainX.com, domainY.com ..
    Mail routing via LDAP query of mail address.
    Routing should be host based like:

    User1@domain.de -> smtp:mail.domainX.com
    User2@domain.de -> smtp:mail.domainY.com

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  14. WebAdmin: Search within Ranges for a Port

    In older versions (<7) you were able to search through service definitions that covered a particular range of ports for a port within that range. Now you can't -- you can only search for the end points of the range.

    For example, traceroute is defined as 33000-34000.

    Search for 33000, it works.
    Search for 34000, it works.
    Search for 33001, it doesn't.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
  15. Notifications: Mail notifications of bootup errors

    I suggest to implement an eMail-notification of fatal errors during bootup, which cause operations as part of the boot process to fail.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
  16. Reporting: Customizable Quarantine Report

    A customer came up with this idea, regarding his users' convenience.
    They would like to have the Subject column right next to the From column, as they only check those two columns for possible false positives. Right now, the To column is between them.
    So maybe you could give the admin a chance to design the quarantine report mail on his own, as long as he maintains some basic necessary settings.

    25 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
  17. MailSecurity: Per-User SMTP-Profiles

    Define a per-user profile for smtp-proxy. Currently we can only do this by domain, but we need a way to have specific per-user settings for the filters.

    This is required for defining a differing file-extension-blocking-filter for special users, who should receive several extensions, but are in the same domain as the standard definition.

    9 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  18. Networking: Grouping of Time-event Definitions

    need to be able to create complex re-occurring time events where start and end time depends on day of week

    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
  19. HPING Support

    Please integrate "hping" tool at command line in the astaro gateway for testing purposes.

    With the tool hping (http://www.hping.org) it is possible can generate various IP packets,
    this is helpful to track back some connecting issues.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
  20. Networking: GVRP Support for 802.1Q VLANs

    Makes VLAN administration much easier in large environments. VLANS are specified for example on the ASG and will be replicated over all connected switches (with GVRP support). There exists a Linux deamon to handle that (gvrpcd) - but astaro must support it ;)

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos ID New Sophos ID Test Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.