TheMachineWhisperer
My feedback
-
78 votesTheMachineWhisperer
supported this idea
·
-
411 votes
An error occurred while saving the comment TheMachineWhisperer
supported this idea
·
-
3 votes
An error occurred while saving the comment TheMachineWhisperer
commented
You make a good point about the value of detection and enforcement at switch level.
I'm not sure Sophos getting into expanding their focus from the core endpoint / boundary enforcement into switching would be a good move though. I think Sophos' strength is that it has product focus, it hasn't gone down the route some vendors have e.g. the "Forti-everything" approach.
Looking at methods of integrating Sophos protections from central endpoint / XG with existing best of breed switches might be a better approach. The APIs for XG and central could already be used with vendor agnostic switch management software suites to achieve this.
API says endpoint health has gone red, API knows endpoint IP and MAC, switch management integration to API picks up the change, identifies access port by MAC, applies ACL to port to restrict traffic only to the XG, XG restricts communication only to Sophos to support EDR / endpoint recovery.
Cisco are trying to do something similar as an eco-system with their ISE product.
-
2 votes
An error occurred while saving the comment TheMachineWhisperer
commented
Seconded, ability to create auto-expiring guest SSL VPN profiles with connection number and time restrictions for specific access requirements like temporary supplier remote support would be ideal.
TheMachineWhisperer
supported this idea
·
-
39 votesTheMachineWhisperer
supported this idea
·
-
43 votesTheMachineWhisperer
supported this idea
·
-
9 votesTheMachineWhisperer
supported this idea
·
-
9 votesTheMachineWhisperer
shared this idea
·
-
11 votesTheMachineWhisperer
supported this idea
·
-
10 votesTheMachineWhisperer
supported this idea
·
-
34 votesTheMachineWhisperer
supported this idea
·
An error occurred while saving the comment TheMachineWhisperer
commented
+1 client version too please not just server for features available in the latest OpenVPN client like pull filter
-
7 votesTheMachineWhisperer
supported this idea
·
An error occurred while saving the comment TheMachineWhisperer
commented
+1 But also for SSL VPN connections
-
17 votesTheMachineWhisperer
supported this idea
·
-
3 votesTheMachineWhisperer
supported this idea
·
-
2 votesTheMachineWhisperer
shared this idea
·
-
11 votes
An error occurred while saving the comment TheMachineWhisperer
commented
Agreed.
Anywhere a host entry can be configured should permit all host/group types.
For me specifically FQDN entries should be allowed in Device Access Local service ACL exception rules too.
TheMachineWhisperer
supported this idea
·
-
2 votesTheMachineWhisperer
shared this idea
·
-
409 votes
Adding DHCP options to the GUI is under consideration for a future release.
TheMachineWhisperer
supported this idea
·
An error occurred while saving the comment TheMachineWhisperer
commented
Also need this to encompass being able to push DHCP options via the SSL VPN which does not have a typical DHCP server scope as with normal subnets on physical interfaces.
-
7 votesTheMachineWhisperer
supported this idea
·
-
13 votesTheMachineWhisperer
shared this idea
·
In UTM the ability to hide / disable portal categories is really useful for enterprise deployments. This absence of this feature in XG is really notable.