XG Firewall

Suggest, discuss, and vote on new ideas for Sophos XG Firewall. The next thing in next-gen.

XG Firewall

Suggest, discuss, and vote on new ideas for Sophos XG Firewall. The next thing in next-gen.

Suggest an Idea...

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Block tracking pixel and other beacons

    Enable the firewall to block the (currently 1x1) pixels used for tracking. Expand with other web beacons.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  2. Custom header injection

    Option to inject custom header on specific ip or fdqn

    Please will be a great option for restriction in today's world of SAAS.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  3. 13 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  4. More predefined Web Protection Exceptions

    Especially when using HTTPS decryption, but also the AV Scanning itself causes at lot of web services / sites and apps to break. It would be nice if Sophos provided more predefined exceptions that can be enabled as needed. Even if this is not directly implemented to the XG firmware itself, it would be nice if Sophos took the initiative to provide a central collection point for known issues with this e.g. a KB Site that has lists of commonly used exceptions to fix certain issues.

    With HTTPS Decryption enabled there's plenty of stuff that breaks:
    GoToMeeting, Zoom, TeamViewer, RMM…

    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  5. QOS application and web category profile functionality

    Hello,

    If it were possible, create QOS profiles that could be put to the user group or the firewall firewall rule. These profiles would contain the web and application categories inside, being possible to set different QOS for each application or WEB category. So we could limit the speed of a video from youtube to a user who is in a profile of qos and to another that is in another profile could get more speed. The idea would be not only to be global the configuration.

    That would be a great differential for the tool. The QOS configuration is…

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  6. [#8003352] Need to add Exception in HTTPUpload Dynamic Category web policy

    This is regarding your service request number 8003352.

    Just to reiterate, we have taken the following steps to resolve the issue:

    1.As discussed on the chat you need to add exception in the HTTPUpload Dynamic Category policy to deny specific file types in the Custom Web Filter policy.

    2.We have guided you as of now it is not possible to add like this exception in HTTPUpload policy.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  7. Better categorisation of websites

    There needs to be better categorisation of websites. Currently we have to block the "Entertainment" category in school because a lot of illegal movie streaming sites are categorised under this category. There should either be another category made for "Illegal media download/streaming" or they should at a bare minimum be categorised as "Video Hosting"

    13 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  8. Web Category and Reputation Override like UTM

    On UTM we have the Web Category and Reputation override. This can help to add additional URL/Domains to proper category so even the reports match. On XG this is not possible. I guess this feature should not be so hard to implement. I really like the XG web section. Thanks

    33 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  9. Web proxy client

    Add the ability to protect roaming user (system on Datacard, Public WiFi, Hotspot). It should not be dependent of any browser line Endpoint Protection but pure network LSP client.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  10. URL Groups Clone or Import Facility

    Feature of creating list of URLs is already there in Sophos, which is a really an essential featured. But for separate policies we need to create separate URL groups, in which most of the URLs are common. So I suggest like there is a option of Policy Cloning, we should have similar option of cloning a URL group/s or import and export of complete list of URLs in/from a group. This will ease the process of creating different URL groups for different policies. Currently we have to type of copy/paste only one URL at a time for creating a new…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  11. Web Filter should log if a transaction is decrypted or not

    Insert a column in the logviewer to indicate if a page is decrypted for https when "Decrypt & Scan HTTPS" is on.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  12. URL feedback enhancement

    On your support site please give us the abitlity to see how websites are categorised:
    https://secure2.sophos.com/de-de/support/contact-support.aspx

    Now it is only possible to send a url sample for a certain url. It would be better if you can make an url lookup to see how specific sites are caterorised.

    It should be possible similar to the mcafee trusted source site when you search for a specific url:
    https://www.trustedsource.org/

    This would make the admins life way easier to commit url samples.

    24 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  13. Per-policy control for SafeSearch

    Please provide the option to enable/disable Safe search and youtube restricted mode per policy.

    In schools we need the ability to enable/disable the safesearch and youtube restricted mode based on the policy for individual user groups rather than globally while at the same time as having web category filtering.

    For example we would like to turn safesearch mode and youtube restricted mode off for certain staff groups but while maintaining the category filtering, where as students we want safesearch and the youtube restricted mode on at all time.

    88 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    13 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  14. Exception ftp

    Allow FTP malware scanning exception.

    The aim is, for example, to be able to prevent malware scanning on FTP traffic to a specific destination. At the moment, the only way to perform this is by configuring a specific firewall rule with malware scanning disabled on this rule.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  15. Category based surfing quota

    We have a request about surfing quota based on a specific category or categories. Right now, this is fuction is available for the general internet but not for a specific category. For instance, we need to restrict the users for accessing to social network websites about an hour a day. After they fill one hour allowance to social networking sites, they will not be able to reach to social networking but they will be able to use their usual internet usage.
    This function is available for other firewall brands and it is really necessary for some customers. I hope you…

    28 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  16. Webpolicy default policy

    Web filter Default policy comes auto-expanded whenever we click on protection - Web.

    This is annoying as every time we need to shrink it and go to our required.

    Also, there is no filter option to search policy while such filter option given in application policy.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  17. Separating “YouTube Restricted Mode” from "Enable SafeSearch" feature

    Separating YouTube "Restricted Mode" from "Enforce Safe Search" option in XG Firewall would allow much more flexibility for customers.
    YouTube "Restricted Mode" is currently just too “restricted” (not usable) and customers should have possibility to turn it on or off without impact on SafeSearch.
    On the other side, SafeSearch is very useful feature that customers would probably have always on.

    95 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    12 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  18. Web or App categories for Office 365 and Suite

    Create New web category and application category for only Microsoft office 365 and Google business to make it easier to allow it directly without the need to create it manually

    17 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  19. Block TLD

    Allow blocking of entire top level domains for example .tv or .ru.

    17 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  20. Add "Top bandwidth users" and "Top bandwidth destinations"

    Can you add Top Bandwidth Users and Top Bandwidth Destinations to the dashboard or someplace easy to access?

    35 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.