In Sophos UTM there was an option to allow specific user groups to override a URL block under Web Filtering. This was really useful for educational environments so our teachers could bypass unintentional blocks for kids. Please bring it back! :)65 votesUnder Review · AdminRich Baldry (Product Owner, Web Protection, Sophos Features & Ideas Laboratory) responded
Look out for a feature in an upcoming release that will allow nominated users to selectively allow users to bypass policy for specific sites. This will let teachers to set up lists of sites to allow for their students and give students an access code to be able to bypass block pages.
It would be great to be able to see live Bandwidth speed stats for each Interface like we had on UTM.463 votes
This feature is under consideration for a future release in 2018, though a target version is not yet set.
It will be nice to have the possibility to editing multiple Policies at the same time by having a check box on the left (as it is already available on Services Objects) and be able to perform general modification, such as:
edit users/groups member
change Application/IPS/Web filtering
malware scanning option6 votes
Give us the chance to manage XG basic features from CLI, such as:
creating/editing/deleting network objects
creating/editing/deleting ips/application control/web policies
creating/editing/deleting and managing VPN
and more.....135 votes
Create own providers under Dynamic DNS like it's done under SMS Gateways like to update IPv6 Tunnel endpoints when the WAN IP changes or third party DynDNS Services.40 votes
If you have DHCP on the WAN interface and also an IP-Tunnel which terminates there, it would be great if you can configure the local endpoint dynamically. (Take the IPv4 value of interface Port1)7 votes
Add AICCU support (Like on UTM) [https://www.sixxs.net/tools/aiccu/] for Sixxs.net ipv6 tunnel handling.9 votes
Drop the whole concept of Zones in the access policies. They are redundant when the polices already state the networks and the interfaces.
That is to say, a Zone means nothing when you already have to define the source network an the interface it arrives on.6 votes
Just migrated from UTM to XG. It's fantastic. One small thing, please bring back support for OpenDNS dynamic DNS. Please, please.68 votes
In the log viewer, you have to choose the log View what you want to view for System, Web Filter, .. etc.
Because of you can add filter options like an IP address, would be better if you can see all logs related with that filter at the same time.12 votes
This is currently being developed for inclusion in v17
Would be useful if you can click in the tree menu path to go back in the config options.
For example in System > System Services > Web Proxy if you can click in "System Services"11 votes
It would be very convenient to assign static ip to users logging in through SSL VPN client. Currently this feature is available only to L2TP and PPP users.195 votes
Adding a Business application non-HTTP rule you should have the option to use "Objects > Hosts and Services > Services" objects as the Port Forwarding target.
This reduces the rules required and keeps it more unified..
At the moment you need to add multiple rules I.E. A hosted service uses a mixture of single ports, port ranges and both tcp/udp will require multiple rules to achieve something very simple.98 votes
This is currently being developed for inclusion in v17
Tried network agent to authenticate users and it is a very nice feature.
Once installed, you connect with mobile to user portal, download certificate and import inside the APP.
However I would suggest to add an option inside the APP that allow the APP to work only when the mobile is connected using a specific SSID Wi-Fi connection. At the moment, the only integrated option are:
This ensure that user do not need to open the APP when they are back to work and save battery.28 votes
It should be allowed to change the name of Physical Interface objects from default PORTx name to custom one.
Also, comment attribute/field should be added for additional description (like it was available in UTM9).418 votes
This is being implemented as part of a larger project, which makes some under-the-hood improvements to configuration handling, which is why this has not been implemented sooner.
NTP Server is a small package and UTM9 has it. In some small organization, having a central NTP server is a nice feature.
Can you add it into future release?
You can put it inside device access, denying WAN from using NTP server for security reason.637 votes
This feature is under consideration for a future release, though a target version or timeframe is not yet set.
At the moment, if you try to remove a object used somewhere (Policy Rule for example) a message appears saying that "the object is already in use." So give us where the object is in use and allow Admins to delete it.
You can add an extra column with number of times the object has been used and give LINK where the object is used so we can go directly to the place and check if can delete it or not.142 votes
UTM 9 had great DHCP options that you could assing globally or to an individual pool. For people with VoIP deployments this is Huge.347 votes
Adding DHCP options to the GUI is under consideration for a future release.
At the moment there are different type of authentication missing even on UTM9 against ISA server 2006, such as:
1. Two-factor authentication using forms-based authentication and a client certificate.
2. Delegation of credentials by using NTLM or Kerberos authentication.
3. Kerberos constrained delegation.
4. Secure Sockets Layer (SSL) client certificate constraints
In this way, XG and UTM9 are the very alternative to ISA Server.131 votes
- Don't see your idea?