I have a new request about issuing shared limit network quota for a group.
Now when I assign to network quota to group , that group each user will getting that particular data quota.

Ex: User Group Name - Test and Allocated 200GB to group, The test group have 10 Users.
As now In sophos Each user will get 200GB. But I want to use this 200GB as a Shared Data bundle.

I'm using AD as authentication service in my sophos xg.
But users can't change password using user portal.
So pls enable that option for the AD.

I have a huge problem with doing HTTPS Decryption and Scaning.
Because in my enviroment haven't AD to push self-signed certificate.
So I want to add CA Author Signed certificate, But unfortunatley any of CA Authority not providing root certificate. Therefore I have new suggestion , Pls add sophos own CA Signed root certificate to sophos firewall. It will be helpful all of sophos users to enable HTTPS Decryption and Scaning without installing certificate manually. Because browser will trust certificate automatically. I still waiting for solution for this.

A particular Server IP address which is included in the Static Route range for MPLS

connection need to redirect through IPSEC Site to Site VPN link.(Case ID 9440485)

PLease allow us to receive alerts for advance threat Protection and Web protection. If there is any kind of DoS or DDOS attack and any type of Web application blocked, admin can get alerts instantly on email.

PPPOE connection does not reconnect after being out of service (Outage) for too long. Need an option to set a time period for a attempt to reconnect after a long outage. The only solution for now is to get back to the office and reconnect manually which is a pain.

It is better to have load balancing on SSL VPN. This will help us in managing the traffic when 50 users connected to SSL VPN

Sophos XG IPS signatures differ between 1U and 2U appliances. As of today, 1U and virtual appliances scan for 7,000 signatures; however, 2U appliances scan for over 22,000. We have been told this is by design given the lower compute on 1U/Virtual appliances. This means that customers with a 2U appliance are better protected than those with 1U. We would like signatures to match between all appliances and have an option to trim up signatures, if needed.

Ther is no possibility to disallow ICMP packages to the gateway adresses from the used adapters

Customer would like to have different load balancing condition for specific firewall rule created. For your assistance please. Thank You.

Please create and update daily the TOR exit nodes as a WAN Source network. Ideally we would want to block anything attempting to access, scan or interact with our WAN IP Space from such a risky source.

I have third-party WiFi APs connected to a network port on Sophos XG firewall and hotspot/voucher defined on Wireless configuration. I have specific hosts that need to be able to authenticate/access Internet without voucher login. These specific hosts do not have web browser or capability to login with a voucher (example: PoS terminals) and hence the need to bypass login based on either MAC address or IP address by creating a firewall rule. However, this is not working and it forces the host to login.
Ticket #9121971

Install nmap in XG devices would be very useful as it is in SG devices. Is that possible to do it in next releases?

DHCP lease for more than 30 days, 30 days are not enough in some cases!!!

Allow high availability between physical machine and virtual machine in Sophos XG.

Hello.

Today I miss a tool that verifies possible faults in the XG firewall, for example, browser exploit, vulnerability with control communication, zero day, download of infected files, among others.

I believe that the development of this type of tool is important for an overview of the environment, regarding possible vunerabilities.

Hello Sophos Team,

We don't have feature of Port Triggering on Sophos Firewall, Can we have a feature on Sophos XG Firewall. It can help me solution over Ransomware,

Hello Sir,

I needed a feature to authenticate users with Proxy Server, Like CC Proxy does.

Therefore we can configure User Authentication of Terminal Server for Web Filter userwise without Domain Controller.