XG Firewall

Suggest, discuss, and vote on new ideas for Sophos XG Firewall. The next thing in next-gen.

XG Firewall

Suggest, discuss, and vote on new ideas for Sophos XG Firewall. The next thing in next-gen.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. A way to view hotspot terms of use every time during testing

    Force a client to see the HOTSPOT's Terms of use acceptance page every time during testing? Or give us a way to clear out a session for testing he custom template.

    2 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  2. Mesh for AP55s on 5ghz

    Currently you can only create a 2.4ghz mesh network on AP55s.Business requirement
    1/. Sophos stays competitive and in the business of WIFI security
    2/. Sophos has products that people want to add the their XG range of hardware
    3/. provides greater throughput than achievable using 2.4ghz mesh.
    Larger files take noticeably longer to load over a 2.4ghz mesh

    8 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  3. Mobile-based OTP for Wireless guest user login

    We need OTP for WiFi Guest users access to same same or different network. When new guest come in Office then they connected to network and when Guest users try to access internet they should for mobile number and after submitting Guest user get OTP on mobile number which he enter.

    5 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  4. Facebook

    Is it possible to use Wireless authentication by Facebook and others social on Guest Wifi network via sophos AP ?

    39 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  5. Allow Visibility and control of Live Guest Hotspot Users

    It would be really nice to be able to see a list of current Hostname/Mac addresses of those using the hotspot (and boot them if necessary).

    It would be even better if I could get a daily report that shows me hostnames/mac addresses of those people using the hotspot.

    13 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  6. Wireless AP Unique Identifier (UID)

    It would be great if we can trigger UID LED on the wireless access point. Sometimes it is hard to determine which physical access point we're configuring especially when located in multiple levels.

    5 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  7. Restart Wireless Access Point Function

    Each access point should be able to be restarted. This helps in two ways:


    1. Perform a OS restart of the Access Point if 'turning on and off' the wireless network does not work

    2. Allows you to see a port blip on the POE switch to confirm what port the AP is connected to in remote areas

    101 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    8 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  8. wireless client list

    On the UTM there is the option to add custom names to a wireless client.
    Wireless protection - Wireless clients - Wireless Client list
    Would be great to have this option on XG also.

    14 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  9. Wireless AP Channel planning

    Require the ability to globally set the wireless environment channel plan, especially within 2.4Ghz space. At present although set to UK settings and in auto the system is selecting channel 13 which the upper frequencies stray into channel 14 which are not allowed in Europe. Ideally need to be able to select appropriate channel plan for AP's to follow. Adjusting a single AP is not an issue but for multiple the system should be dynamically calibrating correctly this selection.

    6 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  10. Pre-authenticate Hotspot users by MAC

    I have created Hotspot and the vouchers for guest users. However, on this hotspot, I would like to have some users be authenticated with their MAC addresses such that they are not prompted with a captive portal to enter voucher. This feature is helpful - to authenticate/allow users based on MAC addresses on guest or other hotspot.

    14 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  11. Ability to configure low signal drop off

    We all know Mac's don't support 802.11r fast transition, and instead do signal strength. Can we set the minimum receive RSSI to help force a device to a closer AP?

    5 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  12. Wireless Device steering when AP overloaded

    In our environment we use more AP's than needed to help with device density issues. The average employee has 5 devices on our WiFi network, with our older Aerohive devices we moved away from we could specify max clients per AP, it would then steer the user to the next closest AP with available space. This allows for better overall performance and to allow for higher density AP's.

    9 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  13. Automatically Authenticate Users when disconnecting from NIC to Wifi

    To have the ability for a user to automatically authenticate when disconnecting from their NIC and connecting via wifi. At present, user needs to log out and back in to their laptop whilst on the wifi for STAS to register the user as being logged on to the wifi.

    3 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  14. Built-in WiFi should support Bridge to VLAN

    The XG105w (wireless enabled) only supports Bridge to AP or Separate Zone, and not bridge to VLAN. This is fine for when you a have a really small deployment, which is not integrated with additional Sophos AP's within the environment. For a growing and secure wireless SMB environment the best practice would be to utilise VLAN's and segment the different wireless traffic through the network.
    Ideally this config should flow and replicated through AP groups including the XG on-board wireless.

    1 vote
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  15. Auto-disable DFS when transmit power <=50%

    Automatically disable DFS when the transmit power is set to 50% or lower on the AP’s as is allowed by the Australian Communications and Media Authority

    Switch CH bandwidth between 20, 40 and 80HMz

    2 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  16. wireless band steering

    Band steering allows dual band devices to be forced onto the faster 5Ghz spectrum when supported to free up bandwidth for those devices which only support the 2.4Ghz spectrum.
    I believe Sophos Cloud wifi already supports this.
    We need this on both XG and UTM

    58 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    6 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
    senthilraj.s responded

    Thank you for Reaching out .

    Wireless Bandsteering on XG & UTM is present in our Roadmap . We will keep you posted once a Release Vehicle is Identified .

  17. Periodically update Wireless Passphrase with Registered Devices/MACs

    Have Sophos UTM/XG update the Passphrase for the WiFi periodically where it updates any registered devices/MACs automatically.

    2 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  18. Schedule AP firmware updates

    it would be great to schedule applying updates to wireless AP units.

    It would also be good to be able to update multiple APs at different times in order to avoid a total wireless outage

    19 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  19. Captive portal should support external authentication providers

    Include external authentication for guest users. Here we achived force authetication only in our hotspot. But some sms gateway device need external authentication. Pls add this features

    2 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  20. Allow option to ignore RADIUS Logoff

    The ability to ignore Logoff requests issued by RADIUS accounting - similar to the feature found in STAS. This is because many wifi providers issue STOP frames as devices roam to RADIUS Accounting, which can cause temporary internet disconnections when roaming.

    4 votes
    Sign in Sign in with Log in with your Sophos ID
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.