Sophos Ideas

Sophos Ideas

Do you have an idea for a Sophos product? Do you recognize a good idea when you see one? We want to hear from you!

Lucar Toni

← Sophos Ideas

My feedback

  1. Share port 443 with VPN and Webserver

    102 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    7 comments  ·  XG Firewall » VPN and RED  ·  Flag idea as inappropriate…  ·  Admin →

  2. SSL VPN: configure listening interface(s)

    169 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    18 comments  ·  XG Firewall » VPN and RED  ·  Flag idea as inappropriate…  ·  Admin →

  3. Assigning static ip to SSL VPN users

    382 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    93 comments  ·  XG Firewall » VPN and RED  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    Just some ideas to resolve this today:
    You can work with SNAT / DNAT to give specific IPs always the same IP.
    You can work with user based Firewall rules to allow a certain User to access resources.

  4. SSH Access - User can access the SSH with its own credential

    127 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    16 comments  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    You could move to SSH Keys and resolve this audit issue.

  5. Bridge like UTM9

    132 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    3 comments  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    As far as i know, everything should be possible in V18.0.

  6. AD integration - Substantial Improvements desired/required

    147 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    5 comments  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    Actually both requests are implemented into XG Firewall.
    XG knows all backend groups and match them against firewall / proxy etc.
    It syncs all groups while authentication - This method should be more efficient compared to a static scheduled task. Each and every authentication process (you login, STAS refresh the auth etc.) will resync all groups.

  7. Sophos Connect - Add groups to "allowed users"

    89 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    7 comments  ·  XG Firewall » VPN and RED  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    https://community.sophos.com/xg-firewall/b/blog/posts/xg-firewall-v18-mr3
    V18.0 MR3 supports AD Groups.

    An error occurred while saving the comment
    Lucar Toni commented  · 

    Hi all,
    just a small workaround: You could actually roll out the SC for all users (select all users) and block / limit the access by the firewall rules with AD Groups.
    In this setup, each user could actually build up a connection, but only can access your facilities, if he is in the proper firewall group.
    The Firewall rules supports a AD groups.

  8. Improve Live Connection TAB information

    152 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    12 comments  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    There are some improvements in V18 already.
    https://community.sophos.com/products/xg-firewall/sfos-eap/sfos-v18-early-access-program/b/blog/posts/sophos-xg-firewall-v18-eap-3-firmware-has-been-released

  9. XG as NTP Server

    870 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    57 comments  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    PS: Since V18, you can build a reliable NAT redirect to any source, you like.

  10. Outbound mail released from Quarantine does not use configured IP in MTA rule instead it uses WAN interface IP

    2 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    2 comments  ·  XG Firewall » Email Protection  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    You can select a FQDN for Digest since V17.5 MR8.
    https://community.sophos.com/products/xg-firewall/b/blog/posts/sfos-17-5-mr8-released
    Is this the feature you are looking for?

  11. Ability to do bandwidth and speed tests for the WAN interfaces.

    136 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    13 comments  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    I am quite a fan of using the CLI. Maybe as a workaround, using wget.
    https://lifehacker.com/how-to-test-your-internet-speed-with-a-terminal-command-1364123567

  12. Anonymization/Pseudonymization of users

    53 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    2 comments  ·  Phish Threat  ·  Flag idea as inappropriate…  ·  Admin →
    Lucar Toni supported this idea  · 

  13. RED: Assign static DHCP leases on a RED interface

    26 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    2 comments  ·  XG Firewall » VPN and RED  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    Would be possible, if you disable the RED created DHCP server and create a new one.
    Workaround for those, who need this feature.

    Lucar Toni supported this idea  · 

  14. MAC authentication for SSL VPN

    29 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    12 comments  ·  XG Firewall » Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    Hi, would be possible with Synchronized Heartbeat instead of MAC.

  15. Add iptraf for advanced troubleshooting

    26 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    3 comments  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Lucar Toni commented  · 

    Hi Andrea, Iftop and other advanced troubleshooting commands are included in MR6.

    Cheers Luca

  16. No NAT-T when configuring Site-to-Site IPSec VPN

    29 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    1 comment  ·  XG Firewall » Base System + General UI  ·  Flag idea as inappropriate…  ·  Admin →
    Lucar Toni supported this idea  · 

Feedback and Knowledge Base

(thinking…)
icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.