Sophos Ideas

Do you have an idea for a Sophos product? Do you recognize a good idea when you see one? We want to hear from you!

christianlouis

My feedback

  1. 597 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    52 comments  ·  SG UTM » Networking  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    @Thomas: check out the new Application Control and Visibility Feature that was introduced in the v8.2 beta. This allows you to define QoS rules on Applications, such as YouTube and Netflix. Might solve your problem. However this doesn't offer a true "quota" in MB per day or so.

    christianlouis supported this idea  · 
    An error occurred while saving the comment
    christianlouis commented  · 

    You can add QoS rules for each and every IP that you have at the moment. However I'd guess that you like to add those rules automatically without having to preconfigure them, right?

    At the moment only static ip assignments via DHCP + manually created QoS rules would help with that.

  2. 2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  SG UTM » Logging  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    From the debugging point of view it is sometimes beneficial to see the actually typed pw. Other reasons would be to limit the log space used and to speed up log file search once the debugging session has been conducted.

    christianlouis shared this idea  · 
  3. 5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  SG UTM » Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    What would be the advantage for this over the existing download time interval?

  4. 25 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    Under Review  ·  5 comments  ·  SG UTM » Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    You can create a Service Group consisting of more than one atomic service definition: Type of Service: Group.
    This should solve your problem.

  5. 5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  SG UTM » Operating System  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    I'd change that feature a bit and tie the keyboard layout for the console to the country picked and/or make it a confd only option.

    The problem is that this option in the WebAdmin would confuse people too much, as a normal Astaro customer doesn't have to access the console anyways. There are other means to access the box on the command line, e.g. via ssh or via serial console, in which case your local keyboard settings are applied.

    Just my 2 cents
    Christian

  6. 10 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  SG UTM » Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    Hi Garrett,
    it would be very interesting to have an example of what the ASG is not able to block, but ABP is.
    Have you tried submitting the "annoying" URLs to the SmartFilter XL database for inclusion and hence tune the Astaro solution?
    I am personally located in Germany and ad blocking works fine for me on many sites.
    Christian

    An error occurred while saving the comment
    christianlouis commented  · 

    Hi, are you aware of the URL filtering category "web ads"/"Advertisement" that does pretty much the same job? If there are in your opinion differences, please describe them a little further, so that the difference between what's there and what's desired gets a little clearer. Thanks!

  7. 5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  SG UTM » Reporting  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    What would be the business value for this kind of information? Just curiosity for end users or is there a "use case" for this kind of information besides "I'm a geek, I need to know the technical data"?)

    (this is not meant as negatively as it might sound)

  8. 4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  SG UTM » Authentication  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    You can use packet filter rules combined with time ranges to achieve that. Plus, if you'd use certificate based authentication, you could let the certificate expire.

  9. 12 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    7 comments  ·  SG UTM » Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    You can use the ARM product (or another host running syslog-ng plus some filter rules) in order to achieve this goal until this feature has been implemented.

  10. 17 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  SG UTM » Logging  ·  Flag idea as inappropriate…  ·  Admin →
    christianlouis shared this idea  · 
  11. 10 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  SG UTM » Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    I'd rather suggest to a) either have a spare server handy that can be used for a quick replacement setup (Installation + restore - 45 min tops) or directly order a 2nd unit as Failover. The USB feature would only be a temporary fix for customers that have a) Platinum support and b) have a problem with the HDD and c) only run a single box.

    I doubt that there are that many customers around who have Platinum support, need the box running and do not have a HA failover setup. But, please comment if you are one of those customers. My short experience with the product may have biased me in a rather "unusual" way.

  12. 38 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    14 comments  ·  SG UTM » Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    Hi Jeff,

    what benefit would such a check bring? Also there are tools e.g. for Firefox that are able to spoof your User Agent settings, so it's rather hard to do.
    Maybe you can describe the reason behind your feature request a little bit more and the goal you try to achieve.

  13. 10 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  SG UTM » VPN  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    christianlouis commented  · 

    Which criteria should be applied to identify systems? Registry keys? System names? Or how do you mean "defined" systems?

    It's also very easy to copy from an XP to another XP system, even if the SSL VPN client would use any information stored in the registry.
    The key is to harden your local XP systems (device lockdown, matching access rights to your configuration files and keys, let OpenVPN run as a system service, hard disk encryption).

  14. 8 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  SG UTM » Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
    christianlouis shared this idea  · 

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.