We have users who are connecting via PPTP to the VPN that are not terminating their PPTP VPN session on their PCs. They are using Windows Built-In VPN application to connect.

This results in a single user having several sessions taking up IP address from our set VPN IP range.

Unless I'm not seeing it, can the option to terminate PPTP VPN sessions based on activity be added?

We're using SG330 (SFOS 18.0.4 MR-4)

Is it possible to publish the RED devices as a software image (for example for vmWare and HyperV)?
We have use cases in PaaS- / IaaS areas in which such a scenario would be very practical.

enable mimo/mu-mimo feature on XG wifi similar to central managed

Please add a feature to add ip host and fqdn host using cli

For home use it would be really nice to block ads before even entering the network.

A very popular format for these link lists is the format used by the popular addon adblock. There are many lists out there which are very nicely maintained (for example easylist). It would save a lot of work if we could just use these lists.

Edit the Release Link in Quarantine digest email for XG 17.5.13, not to x.x.x.x:4444
rather to the UserPortal, instead to message: "You can release quarantined emails only from user portal. To release them, sign in to user portal."
Or remove the link.

please remove releaselink in Quarantine Digest.
The standard user is not able to distinguish between harmless SPAM mails and dangerous SPAM mails.

Sender field, in quarantine report email, currently presents only the forged/fake address of a Phishing/Spoofing email.

A good idea would be to add the real Sender Address, and maybe color it with RED to be eye-catchy and alert the user to pay attention to it.
Alternatively, display only the original email address.

Static route should always be the top precedence by default. I have several tunnels that have stopped working after updating to v18 and having newly migrated policy routes take precedence.

Additionally, it would be nice to have a GUI-based option to change the precedence order, rather than needing to go and and make a CLI change for each device we upgrade.

It would be helpful if there was an option to select an entire network or a range of IP addresses for multicast forwarding. Currently, only individual IP addresses can be entered.

I would like Japan's JPNE to support IPoE IPv6 Plus (IPv4 in IPv6 fixed global IPv4 service) provided by NTT's NGN network.

FortiGate is supported, so please use Sophos XG Firewall.

https://www.jpne.co.jp/service/v6plus-static/

When our ISP is down, we receive an email notification that the particular WAN connection is down. However, we never get a notification when it is back up. Instead we have to go into the web GUI to confirm. I would really like to be notified when our connection is up after it being down. I have talked to support about this and they have said that Sophos does not support this feature please reference [ref:00D301GN6a.5003Z1BCbKS:ref ] for more details.

We need the ability to connect the Sophos XG to a third party private VPN service (NordVPN, PIA, Proton VPN). The XG would function as a client connecting to the service.

today, companies have no way of knowing how long a user was connected to the VPN and today due to use in the home office, the company has no control over usage and how long the user was connected

Change the requirements of the Hotspot Password (POTD). Password is now generated with 10 characters (a-z, 0-9). Make it possible to change it, example 12 char (a-z, A-Z, 0-9, !@#$)

Allow users to be granted Sophos Connect access via AD Group rather than just by individual user access.