SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Pushing Routes to SSL Clients with custom Metric

    It would be helpful to define which routes are pushed to the SSL clients AND define the desired Metric to the route. I's needed when clients open the tunnel in the internal network and you don't want the traffic to go through the tunnel instead of the local NIC.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
  2. Troubleshooting for RED

    to be able to do basic troubleshooting on RED devices it would be fine to include CLI access and some basic commands like:
    tcpdump
    traceroute
    ping
    telnet (for Port checks)
    ...

    this would be fine, if something fails between remote location and central device. It would be nice to be able to prove functionality for other involved parties.

    12 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Remote Ethernet Device (RED)  ·  Flag idea as inappropriate…  ·  Admin →
  3. 10 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
  4. WebAdmin: Send Backups via FTP

    Instead of using an email address to send the backups to, can you please add FTP functionality so that we can use a centralised location that can be backed up without an user input other than the original config.

    14 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
  5. Authentication: Routing Authentication per Domain

    It's important to have a chance in big customers the chance to route authentication process in base of domain name. it would an improvement about what there is already available. Example: users@gabriele.com will be authenticated by radius on server1; if authentication fail, users@gabriele.com will be authenticated by Active directory on server2. ecc.

    Very efficient in big environment.

    25 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  6. SSL VPN: Client Installation Options

    It would be nice if you could pass options to the SSL VPN Client installer, such as
    auth-nocache etc....

    7 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
  7. FTP Proxy: Profiles Support

    i need a ftp proxy profile mode where i can set different profiles for different networks.

    6 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  8. Mail Security: Separate Incoming and Outgoing Extension Blocking

    To prevent Intellectual Property Data-Loss, it would be much better,
    if there are 2 separate Filter Lists - one for Incoming and one for Outgoing Extension Blocking.
    Via Extension Blocking we want to prevent, that e.g. DWG-File Attachments are sent to customers by the Engineering department without approval.
    After approval, the secretary should be able to release the outgoing blocked Mail.

    8 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  9. 3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  10. Packet Filtering: Rule-Match Tester

    I recently ran into some trouble trying to figure out if a specific traffic was being blocked or is allowed to pass through.
    IT would make things much easier If I had a search-option to put in a source and/or destination IP and port and let the Astaro check if there is a rule covering this IP/Port or not.

    7 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
  11. Stricter Control over Relaying Allowances

    Currently Email Relay checks for allowed users and Host based, in both cases the user name or IP address can be spoofed or hijacked by a spambot, it would be great to have more granular checks such as that the user allowed to relay should send with the same account and as well limit maximum number of emails per sender.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  12. Reportin: Allow Retention of 12 months

    Currently the max retention of on-box reporting is 6 months, please allow us to retain reports for an entire year.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
  13. Mail Security: Email encryption - prevent void Certificates

    Currently if a user is enabled for mail encryption and there is an existing certificate it will be used - there's no check if it's still valid (date).

    PLEASE add a check that expired certificates are not longer used!

    regards

    10 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  14. Logging: Time Window Parameter for Search

    In large logs, is not necessary to search from 00:00:00 to 23:59:59 if I want to search in another hour interval, for example, from 09:00:00 to 12:00:00, and not waste time

    5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    Under Review  ·  2 comments  ·  Logging  ·  Flag idea as inappropriate…  ·  Admin →
  15. Mail Security: Set Admin on Per-Domain Basis

    It would be nice if it was possible to name an administrator for a domain and have the Mail Manager in Mail Security show quarantine and mail activity just to/from addresses in an individual domain

    20 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  16. Prefetch for POP3-Accounts

    Admin should be able to add/manage POP3 account for prefetch. Login in to the enduser portal is cumbersome as password of all users must be obtained first.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  17. Mail Security: Configuration Changes Based on Reporting

    The Quarantine Report should provide a 3rd option (besides release & whitelist), namely whitelist domain. This would trim the size of the user's whitelist considerably and cut down on false positives from the same domain.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
  18. Networking: DSCP-Based WAN Uplink Rules

    I´d like to see a service definition based on dscp/tos values to seperate my traffic to different uplinks by tagging it with dscp tag. Currently it is only possible to make bandwidth reservation based on dscp but not routing .

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
  19. Usability: Per-User Language Settings

    It should be possible to set a language of a user object. We have support for many languages. By having this feature for example a tech-support agent could login to a firewall which has it's WebAdmin set to Chinese and see it in english without having to change the setting.

    There are many applications such as the UserPortal, Daily Spam Digest etc...

    8 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
  20. Authentication: Proxy for Authenticating to Local Resources

    Implement an authentication proxy to access a local subnet or vpn subnet for a configurable time.

    7 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.