XG Firewall
Suggest, discuss, and vote on new ideas for Sophos XG Firewall. The next thing in next-gen.
-
MTA SMTP policy filter mails by headers from, to, etc..
223/5000
In the legacy mode of the e-mail protection module there are filter options of the e-mail headers, in the MTA mode there are no such options, as well as those of probable SPAM, probable virus, etc.It would be very interesting to have these options.
1 vote -
Combine Mail exeptions
Combine Mail Exeptions like Sender (and/or) Mailserver (and/or) receipient address to
make it more powerful and flexible.3 votes -
Possibility to except source networks in SMTP exceptions
In the current version (17.5.5) it is still not possible to define whole source networks in SMTP exceptions. It is only possible to select single ip hosts or fqdn hosts.
In a few cases you need to exclude whole /27 networks from greylisting, SPF and more. Very annoying to create single hosts to add.6 votes -
Validate passwords entered for smarthost and notifications
It appears that passwords of a certain length or containing certain characters are not properly handled by Sophos when it attempts to authenticate with a smarthost. The result is that Sophos cannot authenticate with the smarthost and outbound e-mails remain stuck in the spool, showing as failed. There is no indicating in the logs accessible in the GUI that the problem is an authentication error.
It might save users some frustration if Sophos were to either include validation logic to reject problematic passwords when they are entered and/or including a note or tip in the GUI indicating the applicable parameters…
2 votes -
Add content disarm and reconstruction
Add Content Disarm and Reconstruction to XG-Firewalls Email Protection functionality.
It would be great to enable the XG firewall to use CDR when handling incoming emails (with the possibility to access original files for a certain time if neccessary)
1 vote -
Enable SPF protection on transparent mode as well as current MTA mode
Enable SFP email protection in transparent mode.. with the phishing these days, it only makes sense (not just MTA mode as not everyone can use this efficiently or if they have additional anti-spam measures on their own mailserver.
1 vote -
Add Report for Outgoing Emails Attachment Size
In Mail Usage Report on Cyber Roam Please add Attachment Size in an email Also Mention on report.
1 vote -
1 vote
-
use "Any" in SMTP TLS configuration
Need a possibility to choose "Any" while configuring SMTP TLS configuration
1 vote -
Sophos SPX Outlook Add-in - improved user friendliness
Sophos SPX Outlook Add-in - improved user friendliness
Problem/issue:
The Sophos SPX add-in for outlook enables a user to encrypt outgoing emails. This add-in works just fine from a technical point of view, but it is not as user-friendly as it could and should be. When a user clicks on the Encrypt-button and enables encryption, it turns grey to indicate that it is enabled. But this is not easy to see for the user. This is not a clear indication showing that encryption is enabled, and especially if a user has enabled the dark or grey themes in newer versions…1 vote -
IP List Object for MTA mode
This is more of a bug than an actual idea. However the tech support for ticket #8659892 insists this is a new idea .
When creating Exceptions in MTA mode , it allows us to create an IP List object when we want to define a new object to be selected. However This IP List object couldn't be selected at all.
This behaviour is more of a bug than a new feature especially considering that it took them to find out for themselves that IP List is not supported (else they would have replied me that right away instead of…2 votes -
Add blocked file type in log viewer or mail logs
Please add blocked file type in the log viewer or mail logs so that we don’t have to go into policy test and see what file type is been blocked.
2 votes -
Sophos Outlook add-in encrypt forwarded messages
When a user replies or forwards a message that was previously sent as encrypted, the Outlook ribbon will show the Encrypt button as being pressed. This gives the end-user the impression that the mail will be sent as encrypted. But the add-in will not insert the "x-sophos-spx-encryption: yes" line in the e-mail header, so the XG will not encrypt the message. Please get the Outlook add-in fixed so that will properly modify the e-mail header when the Encrypt button is shown as pressed.
4 votes -
Filtering mails based on their language
We can block connections from country based rules, thanks for theSophos.
But we can not filter mails if there is chinese , arabic or russian characters in its body.
It would be very nice if we can filter mails with predefined character sets.
For example if the subject has chinese charset or if the body has russian charset.2 votes -
Purge email via GUI
Hi,
To be able to purge all emails in mail spool via GUI instead of CLI!
Many Thanks3 votes -
log viewer rejected\dropped emails
Prior to 17.5 upgrade, you could see details about an email that was rejected\dropped (senders IP address, among other details) that seems to have been removed in this latest firmware. Hovering over the email in the mail logs says why it was rejected, but the only way to get more detail now would be to open an console session. Please add functionality back in future releases (we are running in MTA mode)
8 votes -
Info which blacklist triggered and why
When a mail has been rejected I can see this in the log but I don't know which RBL has triggerd this and why.
I wish more details in the email log.6 votes -
Info which blacklist triggered and why
When a mail has been rejected I can see this in the log but I don't know which RBL has triggerd this and why.
I wish more details in the email log.11 votes -
Improve DLP Notifications to sender
When DLP encrypts a mail the notification that the sender receives has an attachment with the headers of the encrypted mail. Not all senders of email are IT admins. Please change the senders DLP notification so that they are made aware of which email sent was encrypted and why e.g. Your email sent to (recipient) at 27/1/2019 13:00 was encrypted as it contained an IBAN number.....
1 vote -
Make to possible to use MTA in Sophos XG without Transparent Mode
Currently it's only possible to use the MTA in Transparent Mode.
It's not possible to choose to use it only as MTA without the Transparent Mode.
If the Automatic MTA Rule is disabled MTA isn't working anymore.Please make it possible to choose between a Transparent and a not Transparent Mode of the MTA like it was in Sophos UTM.
2 votes
- Don't see your idea?
