Allow setting secrequestbodynofiles_limit via the GUI for Web Protection policy.

Having to set via CLI tblwafsecurityprofile settings every time a WAF setting changes is very bothersome and leads to more downtime for customers.

https://community.sophos.com/sophos-xg-firewall/f/discussions/114221/413-request-entity-too-large

currently the custom hostname Hotspots length is limited up to 30 characters. If Sophos expand the database-field to more than 30 characters this would be great

currently the custom hostname Hotspots length is limited up to 30 characters. If Sophos expand the database-field to more than 30 characters this would be great

I know there was another idea post for Decryption port monitoring but I'd like to have full blown Port Monitoring as found on all managed or semi managed switches as well as most Ent grade Firewall apps from other developers so this would be a powerful addition for diagnostics / hunting over XG's own reporting functionality which Ive found isn't sufficient, Packet Capture is limited to 2MB at a time and their config and filtering doesn't have custom option facility.

Hope this idea gets votes and would love to see it added to XG sometime in the future.

I know there was another idea post for Decryption port monitoring but I'd like to have full blown Port Monitoring as found on all managed or semi managed switches as well as most Ent grade Firewall apps from other developers so this would be a powerful addition for diagnostics / hunting over XG's own reporting functionality which Ive found isn't sufficient, Packet Capture is limited to 2MB at a time and their config and filtering doesn't have custom option facility.

We need a VPN app for Android that can be distributed and configured via Sophos Central and can connect to an XG. This must be able to handle "VPN on demand" (Android Enterprise).
Central can already distribute certificates via SCEP, but neither the XG nor Central can create a useful, secure, easy-to-use VPN configuration for Android.
This is ridiculous

Our Customer need this feature....
See link -->https://support.sophos.com/support/s/article/KB-000038761?language=en_US

It would be great if the DHCP table would check the MAC Vendor and Display it.

This would make identifying certain devices in a Network so much easier.

Small solutions like a WLAN Router or bigger solutions like certain Firewalls have this feature but Sophos XG is lacking it.

Thank you beforehand.

Plz Allow Xg Firewall On pppoe Username And Password For Client Side Prove then We Can Provide PPOE account For Client Side Isp

As per my company policy we have to retain 3 years log, is there any way in Sophos xg where we can archive daily log reports to external servers automatically without using GUI.

Plz Allow Set Data Quata On Ip Rule

Sophos XG210 failure to do Multiple NAT rules on IPsec Site-to-site VPN

Description:

We want to configure multiple NAT rules on IPsec site-to-site VPNs and the firewall only supports one NAT rule on each VPN. Please can we have advice on how to resolve this.

Please refer to case:ref:00D301GN6a.5003Z1DegHy:ref where support mentioned is not supported at this stage.

Also look at a previous request on this:
https://community.sophos.com/sophos-xg-firewall/f/discussions/84062/multiple-nat-on-single-ipsec-tunnel

The WPA2 field doesn't warn users if they input a value that is longer that what is allowed. Instead it saves the configuration and puts the wireless network in open mode without any security. All password fields within the XG should notify the user of the input restraints they have. They should notify a user of the min-max length. Complexity meter would also be helpful to improve users password choices.

All password fields within the XG should notify the user of the input restraints they have. They should notify a user of the min-max length.

To summarize:


Default re-key time for IPsec remote access is set to 4 hrs and does not have any option to change it from GUI.
- This usually happens in the backend without any interruption (with only one authentication). However, if we have configured MFA then it will prompt for the OTP after every 4 hours as it requires reconnecting.

Administrators may be able to config this behaviour as well be able to associate the IPSec Remote Access to another Policy than the default one.

This feature request is in response to the realization that the STAS Agent cannot establish encrypted LDAP communication to a backend eDirectory server.

Problem: It is not possible to set up the STAS Agent in eDirectory mode with an encrypted (port 636/tcp) LDAP connection. Only a plain text LDAP over port 389/tcp is supported at this time. (We wrote the year 2021 for all readers).

Function: Establish the configuration option and support encrypted LDAP communication to eDirectory server over port 636/tcp for the STAS agent of Sophos XG Firewall.

Dear Team

currently not able to check user wise web and application report like who is using tor proxy or any other web or application.

example i have downloaded movie from any web but there is no option to find which user have access which application.