XG Firewall
Suggest, discuss, and vote on new ideas for Sophos XG Firewall. The next thing in next-gen.
-
Mail notification to multiple recipients
Add support to notification component send email to multiple recipients.
Currently it is supported only 1 recipient.
Best regards,
Carlos
190 votes -
Add support SNMP service to multiple WAN interfaces
Currently this makes impossible an efficient monitoring of appliances (Copernicus) with multiplpe WAN interfaces.
The SNMP server only works through a unique WAN interface.
Best regards,
Carlos
12 votes -
Add support SNMP Community answer to any (0.0.0.0) IP Address
Currently it is needed create one Community to each specific IP address.
It is impossible create two 'Public' communities by example to two different IP address or create a single Community String for any (0.0.0.0) Ip address.Best regards,
Carlos
30 votes -
Allow interface port to be configured with just vlans
As it is right now you must assign an ip address to an interface and then add vlans. doesn't allow you to just assign vlans.
266 votes -
Rename objects
Add support to rename Policy rules name, IPSEC and SSL VPN tunnels name, Webfilter Policy and Category objects, Application Policy and Category objects, QOS rules and all other items.
This will Improve the management, it must be default to all objects. Currently to fix a simple typo error, we must to create a new policy or category and populate all items again. A simple task can turn into a hard task.Best regards,
Carlos
248 votesThis will be implemented in a future release. It is being included as part of a larger project, to generally improve configuration capabilities across the product. Version for release is not yet confirmed.
-
Add option to change Appliance SSH port access
Add support to change SSH port access.
Best regards,
Carlos
134 votes -
Add support to choose both protocols (TCP/UDP) in Service object
Currently we have to create a separated rule to each protocoal TCP/UDP.
Best regards,
Carlos
215 votesWe are currently implementing object based forwarding rules, for inclusion in v17
-
Add support to choose multiple Hosted Address when create a Business Application Policy
Add support to choose multiple Hosted Address when create a Business Application Policy.
Imagine a customer with 3 WAN links and 50 Business Application Policies rules.It is needed create 150 Rules for this.This is a real case today.
Best regards,
Carlos
36 votes -
SSL VPN policy with AD
Add support to create SSL VPN connection to users from the specific Windows AD Group without needed to this user need login (By Captive Portal or Sophos Client) and after that associate the VPN policy.
Today, If I have a specific group from Windows AD dedicated only to VPN users, I do not get associate VPN policy to these user if they do not login first by captive portal, Sophos client or SSO, after that I can associate it into a VPN policy. But if these users do not have HTTP access, I cannot set VPN policy.
Best regards,
Carlos
67 votes -
Add support SNMP via VPN without add static
Add support SNMP via VPN without add static routes. This could be as SSH via VPN, only choose a checkbox allowing or deny the service.
Today it is needed add static route pointing to tunnel name.Best regards,
Carlos
10 votesThis should be addressed, as part of our improvements to VPN tunnel capabilities in v17.
-
Add FreeDNS.afraid.org DynDNS Provider
FreeDNS was on UTM 9, is there any reason why it has not been carried over to XG Firewall.... I for one would like to have FreeDNS enabled in XG firewall as I see no technical reason why it should not be there.
or at least have a custom setting for Dynamic DNS that enables a feature to set Dynamic DNS via a url that can be called by curl.
152 votes -
187 votes
What we will do:
Allow XG software installer to run on XG hardware appliances, after removing current partitions (same option as UTM9)What we are not planning:
We will not allow software install to run trivially on a system currently installed with XG.
We will not make any effort to support on-system wireless, on software installs.
The system will not report itself in any way as an XG appliance, inside the OS. -
Adjustable column width and ordering.
As a firewall administrator, I want the ability to adjust column width and column ordering in any log display in order to have better visibility of data I am monitoring for.
As it stands, the log display grid is not intuitive, and requires scrolling down to get to the horizontal scroll before you scroll back up to see data.
(Can be applied anywhere there is a grid display too.)
45 votes -
SPX password specified by recipient queue the email
When using SPX encryption for email protection, if we set the password type to "Specified by recipient" the email will get sent by the Sender; but a return message will come back saying "a password is not yet created by the recipient. You will be informed once it has been created and then you can send email to the recipient". Instead of making this a manual task for each encrypted email, XG should queue/hold the encrypted email waiting for a password to be made, then automatically send it to the recipient. This is how the email appliance SPX process works…
13 votes -
Allow it to work on i686 hardware instead of requiring x86_64
I have a very good SMB sized hardware that I use with dual core 2 gig ram ATOM processor. work well for sites with less than 100mb internet. now I cant use SFOS because it says its x86_64 only... Please allow a i686 build
3 votes -
56 votesStarted ·
AdminJan Weber
(Product Manager, Network Security Group, Sophos Features & Ideas Laboratory)
responded
We are working on providing more guides and documentation at the moment, this includes video tutorials. This is going to be an ongoing process and we will add more over time.
-
Add support to USB NIC
At home USB NICs are ideal. Exactly the same problem we had in UTM9. Link below.
285 votesThis feature is under consideration for a future release, though a target version or timeframe is not yet set.
-
Improve Logging
At the moment understand what's going on is very HARD. Live logs are missing and notepad on every section is missing.
Add live log and allow admins to configure itself coloured live logs (globally or on single windows?). In this way logs have different level of importance and Admins can better understand if they need to worry about or not. For example allows Admins to set red for high-risk/denied traffic/system error, yellow for warning/natted/or whatever and so on.
I really love the live log on Firewall section of UTM9 where reading what's happen is very very easy.412 votesLive logging in a popout window, and with color coded log lines, was released in v16. Further enhancements, such as a historical logs, a unified log viewer, and improvement of the contents within the logs is planned for v17.
-
Enable/Disable Interface
At the moment, there is no way to disable/enable an interface inside SFOS.
Strange!Even using CLI menu.404 votesThis is a high priority feature, and will likely be targeted as soon as possible after v17 ships, though it is not yet committed to a release.
-
POP3/IMAP-More scanning option
At the moment, scanning POP3/IMAP traffic does only allow to change subject or accept. A really antispam engine will block spam email even on these protocols. Please add more action options.
101 votes
- Don't see your idea?
