Sophos STAS authentication, (Sophos Transparent Authentication Suite) is a collection of tools that provides a method of authentication that was introduced in UTM 9.4. This authentication mechanism has been lacking [...]
Sophos Intrusion Prevention System (IPS) is an advanced firewall feature that protects your network. The downside is that IPS is a resource-intensive process, as it needs to match every packet [...]
In this article, I am going to cover the supported configuration for IPSec site-to-site VPN connections between Sophos UTM (SG) and Sophos XG firewalls. The main limitation to understand is [...]
Since releasing Fastvue Reporter for SonicWall in 2016 and seeing it deployed in hundreds of organizations around the globe, we have become very familiar with the effects that various SonicWall configurations and SonicOS firmware versions have on the firewall's logging and reporting.As a result, here are our main SonicWall configuration recommendations to get the best visibility into user web activity and how your network is operating.
One key feature that was missing from the Sophos UTM SG platform prior to version 9.5 was the ability to use Sophos UTM itself to perform request redirects. We published [...]
Sophos has been making great progress in maturing the Sophos XG platform to the point where it is now a serious contender for deployment instead of the more established Sophos [...]
The easiest way to report on users and groups using Fastvue Reporter for SonicWall is to enable authentication on your SonicWall and let Fastvue Reporter automatically provide the pick lists for Users, Departments, Offices, Companies and Security Groups as you have defined in Active Directory.If Authentication is not an option, you can use Saved Filters to make reporting against resolved host names and Source IPs a little easier for the people running reports. This article explains how.
We have noticed two issues in SonicWall's logging that you need to be aware of if you are running SonicOS 6.2.7 and above, and you need to report or alert on search terms entered into Google.
Unfortunately, all traffic going through SonicWall's DPI-SSL feature is logged with incredibly small size values - only a few bytes for each URL. This means that you will not see any DPI-SSL traffic in Fastvue Reporter's bandwidth dashboards or reports, as it essentially gets drowned out by all the correctly logged HTTP traffic. This article explains your options.
Dynamic DNS is a service you can use to make a device with a dynamically allocated IP accessible from the outside in. Common Dynamic DNS providers include DynDNS, ZoneEdit, EasyDNS, and DynAccess. Sophos XG Firewall supports these four Dynamic DNS providers, but it also includes a fifth provider simply called Sophos, and the great news is it's free! This article takes you through configuring Sophos XG's free Dynamic DNS service.