我的學習手記 A technical geek blog: XG Firewall

Showing posts with label XG Firewall. Show all posts

Tuesday, March 29, 2022

Sophos Firewall: Verify if the hotfix for CVE-2022-1040 is applied on your Sophos XG firewall

Given the "Allow automatic installation of hotfixes" feature enabled (it is enabled by default). First come first is check this setting is it enabled.

Then, you need to verify the hotfix is it install by access the advanced shell by using SSH client remotely login your firewall or via console access

Select "5" – Device Management

Select "3" – Advanced Shell

Enter the following command:

test -f /static/up_mode_json_stamp && echo "Hotfix is applied" || echo "Hotfix isn't applied"

If the hotfix is applied, the return is "Hotfix is applied"

Enter "Exit" to exit the shell mode.

Reference:

Accessing Command Line Console - Sophos Firewall

Sophos Firewall: Verify if the hotfix for CVE-2022-1040 is applied

Sunday, November 24, 2019

Allow Bitdefender updates via Sophos XG firewall

Under Web -> Exception

Create the following rules

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/109202/anyone-else-having-issues-with-bitdefender-updates

Thursday, September 26, 2019

Allow Galaxy Apps Store Update via Sophos XG firewall

Reference:

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/94745/unable-to-update-samsung-phone-behind-xg#pi2151filter=answers&pi2151scroll=true

Tuesday, August 13, 2019

Sophos XG firewall–many website have “Security Risk Detected” while accessing HTTPS sites suddenly on 10 Aug 2019

Workaround solution: Change the antivirus engine from Sophos to Avira

Reference:

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/104624/security-risk-detected-while-accessing-https-sites

Monday, July 1, 2019

Sophos XG Firewall rules - Proxy - Direct mode only

Create a new service “Proxy”

TCP

Source Port 1:65535

Destination Port 3128

UDP

Source Port 1:65535

Destination Port 3128

Reference:

https://community.sophos.com/kb/en-us/125585

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/94552/how-can-i-set-up-web-access-via-proxy-port-only

https://community.sophos.com/kb/en-us/122802

https://community.sophos.com/kb/en-us/123522

Sophos XG firewall upload speed slow - workaround - set Intrusion Prevention (IPS) from LAN to WAN to None (On the LAN to WAN firewall rules)

Sophos XG firewall allow Google update

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/91948/google-play-store-blocked-by-ips

Sophos XG Home firewall

Recommended hardware: 研凌n13 i3 7100 i5 7200u 3855U/3865u软路由主机lede小型工控机linux esxi迷你主机小电脑无线千兆网卡6口

https://m.intl.taobao.com/detail/detail.html?id=555831051793&spm=a21pv.7626635.1563.d0&main_itemid=556708160706&go_item_id=555831051793&scm=1007.11563.113736.&pvid=4e98c97a-493d-46b9-b4c5-e5eb78110eed

i3, 6GB RAM is good enough. (Remark: Home edition limited to 6GB RAM max)

Sophos UTM free edition is not good for home since it remove the web filtering features

If you use 2GB only, the memory usage will be very high (Tested on 17.1)

6GB memory usage will below 50%

It can block many attack at gateway level:

Performance also OK:

Saturday, December 29, 2018

Sophos SG UTM and XG Firewall

Astaro Security Gateway has been renamed Sophos UTM (Sophos SG)
Cyberoam become Sophos XG

Microsoft Internet Security and Acceleration (ISA) server 2000, 2004, 2006 or a Microsoft Forefront Threat Management Gateway (TMG) server 2010 EOL, one of the option are using Sophos SG UTM as a replacement.

Sophos SG UTM – Traditional Firewall comes with full coverage security function.

Sophos XG – Next Generation Firewall (NGFW) comes with full coverage security function PLUS heart-beat function, heat beat means firewall can be communicates with Client PC to stop threat exposure.

UTM: Unified Threat Management

NGFW: Next Generation Firewall