Questions tagged [sophos]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

Configuration for Wordpress installation with Sophos Web Application Firewall

I am running a Wordpress installation behind a WAF reverse proxy. The WAF virtual server is listening on 443 and redirects http traffic. We use a Let's Encrypt certificate. The virtual server is also ...
0
votes
2answers
45 views

Should servers use proxy for security?

I have set up proxy (using Sophos gateway) for PC's and we are using whitelist (so users can only access web pages that are allowed). Is it good security practise to use proxy on servers too? What ...
0
votes
0answers
11 views

Devices on network unable to find each-other

i'm trouble shooting a problem on a network for a friend. I'm more of a software guy, and by no means very experienced in networking. They had a physical sophos firewall and the subscription expired. ...
0
votes
1answer
77 views

O365 Hybrid and Sophos Email Appliance

I am planning to migrate our Exchange 2010 SP3 server to O365 using Hybrid environment. We also use Sophos Email Appliance which is a box sitting inhouse. Currently, the mail flows like this. ...
0
votes
0answers
36 views

Sophos with PFSense: How to Route Traffic with VMware ESXi

I am running ESXi 6.7 on a physical computer with 5 NICs. I have a PFSense virtual machine acting as my gateway, providing DNS and DHCP services to my client computers. I'd like to inject Sophos XG ...
0
votes
0answers
22 views

How to Ping from Remote Branch to a Private Server through Sophos UTM

I have a windows server on a EC2 instance on a private subnet (10.10.10.0/24). I also have a strongSwan VPN server on another EC2, on a public subnet (10.10.11.0/24). Then I connect from my local ...
0
votes
1answer
36 views

Sophos Antivirus or other Firewall/AV blocking Tomcat or AmazonS3Client listObjects() method?

I have a pair of Java/Tomcat web applications running on a third party (customer) server, and of late, those applications can no longer list or download objects from AmazonS3. This is a "nothing ...
0
votes
2answers
146 views

Azure - unable to reach VM over site-to-site VPN

I am new here and also new to Sophos XG firewalls and to Azure nor am I a network expert, which might not be a good combination. On the bright side, there might be something very easy that I have ...
1
vote
1answer
1k views

Suspicious DNS query leads to “Intrusion protection alert” on Sophos UTM

A customer Sophos-UTM reports Intrusion protection alert warnings INDICATOR-COMPROMISE suspicious .null dns query: 2019:01:15-11:54:13 utm-ba snort[31619]: id="2101" severity="warn" sys="SecureNet" ...
0
votes
1answer
29 views

.mount a folder from the salt:// share onto a minion?

I'm trying to write a state that will mount the folder currently in the "salt://" directory with the sophos installer, run the installer.sh, then unmount it. I'm hoping to avoid copying the whole ...
0
votes
1answer
653 views

Userbased Bandwidth limiting on Cyberoam CR35iNG

I want to limit the bandwidth of each "user" on my Cyberroam firewall. This normally works with QoS, but the problem here is, that my users aren't logged into the firewall, which (afaik) needs to be ...
0
votes
0answers
92 views

Deploy exe from AD with elevated Privileges

I am trying to deploy the Sophos SSL VPN client to a group of AD users. The SSL client AND the user specific configuration file both require elevated privileges to install. There is no official MSI ...
0
votes
1answer
218 views

Host and VM share same IP frustrating intent to forward all incoming traffic to UTM on VM, what to do?

I a new to virtual networking and have been at it about 2 months. I have a physical machine (PM) with physical ports eth0 and eth1. Eth1 is not being used. Rather, eth0 is attached to both the WAN on ...
1
vote
0answers
84 views

Implement AD and Group policies over VPN

We have multiple sites with each site having 5 to 10 systems. All sites are connected to HQ through VPN configured on firewall. (Each site has their own firewall) What I want is to connect remote ...
1
vote
1answer
190 views

Fuse SSHFS mount gets stuck with Sophos Antivirus

I have a problem with fuse sshfs and the running Sophos Antivirus Scanner for Linux Systems v9.11.0. I am running as OS RHEL7.1 with fuse-sshfs-2.5. The mounting via sshfs works fine when Sophos is ...
1
vote
1answer
429 views

Can I retrieve email marked as rejected in the SMTP log?

I am using a Sophos UTM 9 SG210 firewall and noticed in the SMTP log that a formerly trusted sender has had 50 legitimate emails rejected. I've since added them to an exemption list, but was ...
0
votes
1answer
107 views

How can I ping devices on Class B network when remote VPN issues Class A network address?

I've been playing with the Sophos UTM Home Edition, and I've noted that SSL VPN connections are issued Class A addresses. Given that the current internal network leases Class B addresses, why can I ...
1
vote
4answers
22k views

How can I set AWS EC2 TimeZone?

I have two EC2 instances operating in the Oregon location (us-west-2c). Each of these when I issue the command date returns a value 7 hours ahead of what I would expect. I have tried adjusting the ...
2
votes
1answer
2k views

How to assign traffic priority with Sophos UTM 9?

I'm trying to assign traffic prioritization with a Linux machine (Debian) running Sophos UTM 9. I can see (and have read) that I can guarantee a service (in this case a specific TCP port) an amount ...
0
votes
0answers
161 views

mail server should anyone be able to send internal mails from external IP without authentication?

Sorry for the long title. My parent organisation that owns the company I work for accepts emails to be sent from test@org.com to test@org.com when connecting via port 25 telnet externally. I'm ...
1
vote
1answer
30 views

How can I protect Sophos OpenSSL settings from being overwritten?

Our company network uses a Sophos firewall with an Apache reverse-proxy, which is configured to allow HTTPS connections. After we realized that some of our clients can not connect over HTTPS, our ...
1
vote
0answers
445 views

R=dnslookup defer (-1): host lookup did not complete

We are using Exchange 2010 and Sophos. I've got one email that keeps trying to send, but gets this error: 2015-10-07 17:40:41 name@server.com R=dnslookup defer (-1): host lookup did not complete In ...
4
votes
0answers
370 views

Sophos firewall default settings do not allow HTTPS from Java 6 clients

Our current (default) Sophos firewall (Apache reverse proxy) settings does not allow Java 6 clients to connect over HTTPS. The ssltest result shows that the reason is "Client does not support DH ...
0
votes
1answer
1k views

Use nxlog to parse a sophos text file and send to a syslog server

I have a windows server 2012 r2 machine with sophos. Each day there is a scan from sophos and the information is appended to the log "sav.txt". Output example (Some info changed): 20150710 ...
4
votes
1answer
1k views

Application layer firewall for WebSockets?

My team has built an intranet portal in Amazon AWS for a client, and on it, we have used WebSockets to do things like notifications and other minor stuff. We mostly send events from the server, but we ...
0
votes
1answer
345 views

Trouble Switching From non-VLAN to VLAN-Enabled Network with Sophos Gateway

Nasty conundrum here. Some background: I have a Sophos UTM ASG220 serving as gateway device for a number of networks, with a Cisco 2960 network switch, and a raft of Red Hat 6.6 servers running KVM ...
1
vote
1answer
2k views

CoreOS bare-metal vlan networking

I need to write a CoreOS Cloud Config file in which I need to setup networking. But i have a problem because I have a bit weird environment. What I'm trying to accomplish; I have a Sophos UTM thats ...
0
votes
0answers
243 views

Overactive SQL Injection Attack Firewall Rules

We have a web app that our client's employees use to submit signatures from customers using HTML5 canvas to create PNG images. The signature pad is converted to base64 encoded HTTP POST data. Our ...
4
votes
1answer
2k views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
0
votes
1answer
1k views

Reverse DNS to match Sophos name, or mail server name

I think this is a simple question with a simple answer. Our domain, cory.co.uk, reports a DNS mismatch when you do and SMTP test on mxtoolbox.com. I think this is causing issues sending to some ...
0
votes
2answers
136 views

Mac Encryption and Reporting

We have a requirement at my company to support Macs. The machines need to be encrypted and have some sort of way to check in with a management system to verify the encryption status. This can be ...
2
votes
2answers
1k views

Virtualizing Firewalls/UTM

So Sophos UTM (Astaro Gateway UTM) can be virtualized in Hyper-V, VMWare, vSphere etc. Now I'm new to virtualization, so am wondering how the networking would be configured in this situation. ...
0
votes
1answer
342 views

Sophos Enterprise Console 4.5, Mac Client 7 Not Auto-Populating SEC Info

I have Sophos Endpoint Security and Control, which includes Sophos Enterprise Console (SEC). I'm currently running version 4.5 of SEC, which is an older version. I subscribe to Mac updates, and SEC ...
2
votes
1answer
732 views

Sharepoint alert email were blocked by Sophos 10.0 - are they gone forever?

We are running WSS 3.0 SP2 on Windows Server 2003 R2 x64. We had recently upgraded our Sophos Endpoint Protection from version 9.7 to 10.0. Immediately, our alerts stopped working (although it wasn't ...
1
vote
1answer
578 views

Can Sophos Enterprise Console run on Windows 7?

I am looking at migrating Sophos Enterprise Console from off an old windows 2003 server onto a new host. I have spare windows 7 licences but no server 2008 spare, does anyone know if the server part ...
0
votes
1answer
310 views

Sophos what is the current client definition?

I'm unfamiliar with Sophos Endpoint Security and have taken over a client who is using version 9.5. The Sophos server appears to be updating without issues, but the clients are unable to receive the ...
4
votes
1answer
1k views

Which RBL's does sophos use?

Anyone know where I can find the a list of which RBL's Sophos use's? I have checked their website with no luck, and currently awaiting a response from their technical support. Thank You in advance ...
1
vote
1answer
1k views

What is “ndptsp.tsp”?

Sophos Anti-Rootkit tells me that on one of our web servers, there is an "unknown hidden file" ndptsp.tsp: Area: Local hard drives Description: Unknown hidden file Location: C:\Windows\...
1
vote
3answers
667 views

Sophos Integration

We are a college within a major university and manage roughly 250 clients and are currently protected via updating from universities anit-virus server (Sophos). We are wanting to migrate to a system ...
0
votes
1answer
626 views

Need to Serve .Config files as text from IIS 6.0 for Sophos Updates

This seems like one of those questions that has a simple answer I am not seeing. We have an IIS server hosting multiple websites, each site on a separate IP. Some of these sites are running ASP and ...
1
vote
3answers
8k views

How can I automatically log out all machines on a windows domain?

Our Sophos Anti-virus scans each night, but complains about files it can't access. Files that are in use by Firefox or Outlook. Is there a script we can configure to run each night before the scans, ...
0
votes
2answers
542 views

Lotus Dominoes SameTime problem

A colleague is having problems with the Lotus SameTime server. It crashes periodically and each time the actual server ST resides on has to be restarted. When you attempt to restart the main service ...
10
votes
3answers
5k views

How to configure “On-Access Anti-Virus” for a faster boot?

I am in the process of trying to optimize the boot process of our 700 Windows XP workstations, we regularly have complaints about the start-up and login times on site workstations. Looking at this in ...
3
votes
1answer
883 views

Stop Sophos trying to update immediately after login

All of our corporate PCs have Sophos installed, but we're getting complaints about slow network speed and boot times from the users. We've tracked this down to Sophos checking for updates as soon as ...