SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

SG UTM

Suggest, discuss, and vote on new ideas for SG UTM. The ultimate network security package.

Suggest an Idea...

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Web Protection: Improve Localization of Messages

    I would be nice to be able to better translate the web proxy messages. Currently, if you translate it to spanish, there are still english messages that are not appropiate for foreign language users.

    5 votes
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)

      We’ll send you updates on this idea

      0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
    • Logging: Enhanced, Standarized Log Viewer with support for logical operators

      Please implement a reader friendly log-, and live log reader which will output any of the the text logs to a formatted output (similar to the actual paket filter live log). Should offer following features for viewing all types of logs:

      - formatted output (as paketfilter live log)
      - colored (drop, pass, block, info and so on)
      - expression filters
      - possibility to filter (do not show) logentries (similar to user portal / smtp log), where you can hide unwanted informations)

      186 votes
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)

        We’ll send you updates on this idea

        17 comments  ·  Logging  ·  Flag idea as inappropriate…  ·  Admin →
      • Reporting: SNMP Trap for File-Scanning Oversize Files

        I would like an SNMP trap and/or email sent when a user requests a file that is scanned by the anti-virus system, but is larger than the threshold.

        This way I can gauge the size of the files that are being downloaded and also know if my threshold is too low.

        My BlueCoat Proxy AV will send an email and SNMP trap such as:

        Cause: Maximum file size exceeded (engine error code: 0x00000000)

        File has been passed through unscanned.

        2009-06-04 11:39:13-04:00EDT
        Hardware serial number: xxxxxxxxxx
        ProxyAV (Version 3.2.2.1(36678)) - http://www.BlueCoat.com/
        Machine name: ProxyAV
        Machine IP address: xx.xx.xx.xx
        Server: xx.xx.xx.xx
        Client:…

        3 votes
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)

          We’ll send you updates on this idea

          0 comments  ·  SNMP Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
        • Management: Enable UPS sharing

          It should be possible to make the UTM the UPS master and other servers obtain notifications from UTM or UTM becomes a client of another UPS server offering informations.

          172 votes
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)

            We’ll send you updates on this idea

            23 comments  ·  Management  ·  Flag idea as inappropriate…  ·  Admin →
          • Mail Protection: Attachment Stripping

            currently, there are several "action" options in the smtp anti-malware section: warn, blackhole, quarantine, and reject.
            We should have a "remove attachment" option which means the unwanted (infected or dangerous) attachment is stripped off the mail, but the rest of the mail is forwarded to the recipient.
            Two things are achieved with this: the recipient is informed immediately about the mail (he doesn´t have to wait for the next quarantine report). And he can see that a mail from a possibily importand business contact has been blocked and see at least the "uncritical" content

            104 votes
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)

              We’ll send you updates on this idea

              11 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
            • VPN: Backend Authentication Support for PPTP

              Currently astaro support only RADIUS and LOCAL authentication in PPTP VPN.

              Since Astaro is using the open source PPTP which is PoPToP, authenticating on AD, LDAP, and others is possible. Would be great to have this added.

              10 votes
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)

                We’ll send you updates on this idea

                1 comment  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
              • Management: Display SSH key fingerprint in WebAdmin

                This is a (very) minor feature. It would be nice if the SSH fingerprint would be available somewhere in WebAdmin (preferably under the Management->System Settings->Shell Access tab). This way, if the WebAdmin certificate is already trusted, the fingerprint could be compared by the administrator to the one reported by the ssh client instead of just blindly accepting it (which is a security problem).

                2 votes
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)

                  We’ll send you updates on this idea

                  0 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                • AstaroOS: WAN Optimization

                  have some kind of packet caching and optimization like the same what Riverbed or BlueCoat does. Instead of my corporate site contains 2 boxes for firewall and packet optimization appliance in each site, this can turn into all in one UTM with ability to have a packet caching mechanism. It will be speed up overall WAN usage and using bandwidth efficiency.

                  47 votes
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)

                    We’ll send you updates on this idea

                    6 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                  • Web Protection: Proxies and Profiles Mapping to Additional Addresses

                    I would like to have the same flexibility as using SNAT in the definition of the internal networks (as I have the dozen or so) for which the public IP address by the transparent proxy is to go to the Internet.
                    Unfortunately Fully Transparent HTTP Proxy does not offer this functionality.
                    Read more at http://www.astaro.org/astaro-gateway-products/general-discussion-feature-requests/25390-feature-requests-configuration-proxy-profiles-use-different-public-source-ip.html#post109466

                    60 votes
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)

                      We’ll send you updates on this idea

                      15 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                    • Multipath: Allow WAN1 to burst to WAN2

                      Astaro must have the ability to allow traffic to burst over to a second WAN link when the primary WAN link is saturated or reaches a defined maximum of traffic amount in a day/week/month. We currently have options to failover traffic depending on source, destination, and interface. What we need is another category for bandwidth utilization.

                      117 votes
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)

                        We’ll send you updates on this idea

                        11 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                      • Logging: Restore Logs into new Installation

                        When you install a new server, all logs are lost since the logs remain at the old server.

                        11 votes
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)

                          We’ll send you updates on this idea

                          4 comments  ·  Logging  ·  Flag idea as inappropriate…  ·  Admin →
                        • Installer: Allow custom Partitioning

                          Allow to split the ASG installation on more than one HDD. ie mount /var/log partition on a separate hdd /dev/sdb1.

                          4 votes
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)

                            We’ll send you updates on this idea

                            2 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                          • Large SSL certificate sizes support

                            I would like to be able to actually control the bit size limit if the certificate and ca for the ssl vpn feature like (4096)+ bit length

                            3 votes
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)

                              We’ll send you updates on this idea

                              0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                            • Networking: DHCP & Dynamic DNS Updater

                              It would be nice to add to the DHCP and DNS the ability to register dynamically on the local DNS zone the name of the machine and IP address that have just be assigned by the DHCP server.

                              102 votes
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)

                                We’ll send you updates on this idea

                                7 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                              • Core: Database API

                                Would like an API into the database so to pull stats for mail users into 3rd party application

                                4 votes
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)

                                  We’ll send you updates on this idea

                                  1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                • LLDP: Link Layer Discover Protocol

                                  Please add support for the LLDP Protocol. This would superseeds protocols like cdp edp and so on. An opensource Implementation is aviable.

                                  21 votes
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)

                                    We’ll send you updates on this idea

                                    5 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Networking: Bandwidth / Traffic Quota

                                    Add the ability for administrators to specify bandwidth limits for users and IP addresses in regards to how much they can consume during a certain time period, certain hard limit, or on a certain service/proxy.. Gives the option to control bandwidth usage on the AxG so that admins can better manage their internet connection and control overusage and heavy users, especially during certain times.

                                    567 votes
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)

                                      We’ll send you updates on this idea

                                      78 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Mail Manager: "Bounce" option for Global cleanup

                                      In case of a misconfiguration or the introduction of an infected PC, it is possible for the mail queue to contain tens of thousands of NDRs.If they are deleted, they are replaced. If they are bounced, they are not replaced. 100 at a time takes too long, so the only current solution is to reinstall from scratch.

                                      2 votes
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)

                                        We’ll send you updates on this idea

                                        1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Allow mixed HTTP proxy modes for same subnet

                                        Actually Astaro chooses HTTP proxy profile by source network only. This disallows the use of 2 or more different proxy modes for same source subnet(s) without restrictions and workarounds. It would be helpful, if for same source subnet(s), if needed, between one and all proxy modes at same time could be activated.

                                        For the SSO, Standard and Basic Modes maybe a option to customize the proxy port for each profile and make the http proxy chosing the appropriate proxy profile using source network AND proxy port may allow this behaviour ?

                                        6 votes
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)

                                          We’ll send you updates on this idea

                                          2 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Reporting: Enhanced Hardware Information

                                          Add granular and detailed reporting graphs showing details like:
                                          CPU usage per core
                                          CPU usage by processes(iowait, interrupts, useful for determining HW problems or poor performance)
                                          RAM per process
                                          SMART status
                                          Heat/Cooling/Power(RPMs, temps, voltages)
                                          UPS status(Vbatt, Vout, Vin, etc)

                                          all of this can be implemented using Munin with some tweaking

                                          267 votes
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)

                                            We’ll send you updates on this idea

                                            Under Review  ·  31 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base

                                          icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-lightbulbCreated with Sketch.