SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

Suggest an Idea...

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Network Definition Exceptions

    Being able to define network ranges with exceptions.

    e.g. 10.0.0.0/8 except 10.200.200.0/24

    3 votes
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)

      We’ll send you updates on this idea

      0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
    • Logging: Live Log for Packet Filter with Rule Filter

      Add a button on each rule, which opens the packet fitler live logs with a filter applied for the rule

      17 votes
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)

        We’ll send you updates on this idea

        Under Review  ·  2 comments  ·  Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
      • Reporting: Real-Time Bandwidth Graph

        Allow real time graphs such as this http://bit.ly/8esVMk for Bandwidth monitoring for instant views of how busy the interfaces currently are without the delay of the already-possible interface reporting charts.

        12 votes
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)

          We’ll send you updates on this idea

          0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
        • Routing: Multicast Dense Mode

          multicast dense mode support is needed

          1 vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)

            We’ll send you updates on this idea

            0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
          • Authentication: SSL-Encryption for Proxy Fallback Login

            Please make the proxy authentication encrypted if the client does not support eDirectory SSO. Actually user and password are sent in human-readable cleartext.

            Same thing for the transparent proxy with authentication. The login form is provided via http... Why not https?

            27 votes
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)

              We’ll send you updates on this idea

              Under Review  ·  7 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
            • WebAdmin: Display User License Counts on Appliances/Unlimited

              Currently, there is a functionality in Management->Licensing->Active IP Addresses that enables only (ASG software appliances) to get current IP address usage.

              If you are using an Appliance with unlimited licensing, this info is not being shown. It could be good to monitor usage for current and past values for this.

              Regards.

              16 votes
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)

                We’ll send you updates on this idea

                Under Review  ·  2 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
              • VPN: Add Win7/Vista SSTP support for SSL VPN

                Windows Vista and Windows 7 have built in SSTP VPN. If Astaro would support that feature, you could use VPN without installing an additional vpn client

                187 votes
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)

                  We’ll send you updates on this idea

                  16 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                • WebAdmin: Search within Ranges for a Port

                  In older versions (<7) you were able to search through service definitions that covered a particular range of ports for a port within that range. Now you can't -- you can only search for the end points of the range.

                  For example, traceroute is defined as 33000-34000.

                  Search for 33000, it works.
                  Search for 34000, it works.
                  Search for 33001, it doesn't.

                  5 votes
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)

                    We’ll send you updates on this idea

                    0 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                  • Notifications: Mail notifications of bootup errors

                    I suggest to implement an eMail-notification of fatal errors during bootup, which cause operations as part of the boot process to fail.

                    3 votes
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)

                      We’ll send you updates on this idea

                      1 comment  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                    • MailSecurity: Per-User SMTP-Profiles

                      Define a per-user profile for smtp-proxy. Currently we can only do this by domain, but we need a way to have specific per-user settings for the filters.

                      This is required for defining a differing file-extension-blocking-filter for special users, who should receive several extensions, but are in the same domain as the standard definition.

                      9 votes
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)

                        We’ll send you updates on this idea

                        4 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                      • Networking: Grouping of Time-event Definitions

                        need to be able to create complex re-occurring time events where start and end time depends on day of week

                        8 votes
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)

                          We’ll send you updates on this idea

                          5 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                        • Reporting: Customizable Quarantine Report

                          A customer came up with this idea, regarding his users' convenience.
                          They would like to have the Subject column right next to the From column, as they only check those two columns for possible false positives. Right now, the To column is between them.
                          So maybe you could give the admin a chance to design the quarantine report mail on his own, as long as he maintains some basic necessary settings.

                          22 votes
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)

                            We’ll send you updates on this idea

                            4 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                          • Radius Accounting

                            We want to use temporary accounts for our guests to connect the Internat thru our guest-wlan. We have a radius server which generates these accounts. With the Radius Accounting Protocol (RFC 2866) on Port 1813 we will be able to count the Usetime and Traffic for an User and disable the account after the specified time or traffic.

                            9 votes
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)

                              We’ll send you updates on this idea

                              2 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
                            • Networking: GVRP Support for 802.1Q VLANs

                              Makes VLAN administration much easier in large environments. VLANS are specified for example on the ASG and will be replicated over all connected switches (with GVRP support). There exists a Linux deamon to handle that (gvrpcd) - but astaro must support it ;)

                              4 votes
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)

                                We’ll send you updates on this idea

                                1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                              • HPING Support

                                Please integrate "hping" tool at command line in the astaro gateway for testing purposes.

                                With the tool hping (http://www.hping.org) it is possible can generate various IP packets,
                                this is helpful to track back some connecting issues.

                                2 votes
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)

                                  We’ll send you updates on this idea

                                  0 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                                • Recipient Verification "Clear Cache" Button

                                  As described in this Forum Thread:
                                  http://www.astaro.org/astaro-gateway-products/mail-security-smtp-pop3-antispam-antivirus/27996-caching-dial-out-recipient-verification-2.html
                                  It would help to have a button that clears the Recipient Verification Cache, because otherwise having corrected typos / misconfigs in backend mailserver might take 2 hours to be effective

                                  14 votes
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)

                                    We’ll send you updates on this idea

                                    2 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Packet Filter "Test Rule" Button

                                    When using "group" containers of IP addresses in the packetfilter rules, it's often hard to tell which rule will catch a given (single) IP address or port during troubleshooting. How about a page or form where we can put in a test src/dest IP address and/or port and it will tell which packetfilter rule will catch it? Similar to how Packeteer's PacketShapers have the "Traffic Class Test". This would be hugely helpful when users call and say "I can't get to site abc.com" and you want to quickly know if it's in the range of addresses or ports that you…

                                    12 votes
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)

                                      We’ll send you updates on this idea

                                      7 comments  ·  Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                    • IPS: Creation of Custom Rules (Snort)

                                      the possibility to add own snort rules would be great!
                                      Customers can add their special rules for their special needs,
                                      so we could be more flexible and more secure.

                                      The AxG can check the own rules via a new snort instance, if everything is fine -> add it to the ruleset.

                                      52 votes
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)

                                        We’ll send you updates on this idea

                                        Under Review  ·  7 comments  ·  Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Transparent Proxy User Authentication Rules

                                        Astaro today is capable of adding user based packet filter rules. Please extend the identification of user's IP addresses that are used in the user based packet filters to the information gathered from HTTP/S proxy authentications.

                                        This would e.g. enable real hotspot scenarios, where a user first has to authenticate against the transparent HTTP proxy and after that is allowed to access additional services like SMTP / IMAP / VPN.

                                        7 votes
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)

                                          We’ll send you updates on this idea

                                          1 comment  ·  Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Add License info to Daily Report

                                          Add the license info (type of licenses) and or the amount of time left for the licenses on the daily report

                                          11 votes
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)

                                            We’ll send you updates on this idea

                                            1 comment  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                                            Planned  ·  Angelo Comazzetto responded

                                            This feature was re-prioritized and will now be targeted for UTM 9.2 later in 2013.

                                          • Don't see your idea?

                                          Feedback and Knowledge Base

                                          icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-lightbulbCreated with Sketch.