What are /r/sophos' favorite Products & Services?

From 3.5 billion Reddit comments

> ExpressVPN

Unfortunately, this is currently not possible and there are no plans to implement this. I would advise for you to create a suggestion on our Sophos Ideas page for visibility to our team.

• Reference:
  

VPN is pretty much the only way if they don’t have VPNs blocked as well.

Nord, Private Internet Access, ExpressVPN, etc.

However, if you are caught using it to bypass services to violate their TOS, count on some level of negative action. They’ll still notice a spike in bandwidth usage.

I am able to block Hotspot shield by blocking and enabling the "Facebook Website" in the application filter. For some reason, the application filter is detecting Hotspot Shield as "Facebook Website".

I was able to block "Psiphon proxy" on android by blocking "", IP Address category, and enabling the Psiphon Proxy in the application filter.

Other VPNs are getting blocked except the "Betternet VPN". Betternet VPN is able to connect using the 443 port.

You can also go with an i3 model.

https://www.amazon.ca/QOTOM-Q330G4-Mini-Barebone-pfSense/dp/B07DLDHKCP/ref=pd\_rhf\_ee\_s\_pd\_crcd\_4/140-9193013-0271036?pd\_rd\_w=b6trp&pf\_rd\_p=8a224ab3-f00a-4adb-87ae-402a6badd419&pf\_rd\_r=FG2A8AEPW2HRCE0XB2P7&pd\_rd\_r=406b8a55...

I bought this from Amazon. You can get it bare bones, or with RAM and SSD. Works great so far, other than the UI being a tad slow.

https://www.amazon.ca/QOTOM-Q355G4-Barebone-Mini-pfSense/dp/B073R1VRLC/ref=sr\_1\_1?crid=D0OZMRP9BSFR&keywords=qotom&qid=1640642659&s=electronics&sprefix=qotom%2Celectronics%2C121&sr=1-1

You won't hear anything here that you haven't heard before, according to my Google searches:

1. It's practically impossible to whitelist an IP range
2. "blocked by IP reputation" has no feedback (what Ip was blocked), and is too agressive
3. can't whitelist a domain (i.e. whitelist 'hubspot.com' covers mail sent from ''). Fixing problem #1 would resolve most of this
4. A lot of viruses seem to slip through
5. no weighted filtering
6. and now, no single click for a user to release messages from quarantine.

The next step then is deciding between our Central or On-prem option for managing your endpoints. For further information, please have a read: https://www.sophos.com/en-us/products/endpoint-antivirus.aspx You will then be able to sign up for free trials. Thanks. ^kc

Try this regex:

^https?:\/\/([a-zA-Z0-9.-]+\.)?schooljotter2\.com($|\/)^https?:\/\/([a-zA-Z0-9.-]+\.)?schooljotter2\.com($|\/)

​

Also, I like to use https://regexr.com/ to test my regexes.

​

Good luck!

Did it only show up with your NordVPN connection on? Im guessing it may have accidently filtered a site on NordVPN. They probably use Sophos web filtering on their services. Otherwise you have a Sophos firewall somewhere.

Apologies for the error, that setting refers to "Block unrecognized SSL protocols in Web > General Setting > HTTPS decryption and scanning." The KBA has been updated accordingly.

• Please note that this block option may cause conflicts with other applications such as Spotify, etc.

Regarding NordVPN, you are correct it's currently unlisted for the XG's application list. However, implementing an application filter policy as per the KB's below, should also block it.

• Sophos XG Firewall: How to block UltraVPN

• Sophos XG Firewall: How to block unauthorized internet access proxies

The option like you mentioned is enforcing this through SAC or through Endpoint Application Control.

Did you end up having any luck on this one? I did go to pfsense and used it for a while. Finally solved my other shoe stopping issue with Sophos, so I'm back with 100% running on Sophos how I want, expert PureVPN.

To be fair, I haven't gone far yet, I was just hoping there might have been an easy guide to map what Sophos calls certain parameters and what PureVPn call them. PureVPN have some tutorials for OpenVPN as an application level/conf files, but not a static list of parameters used for filling in a web form.

This is what I use for my home UTM. Runs great for my 40/5 internet connection. NOTE: this computer doesn't come with a memory or storage once I added in 4GB of memory and a 60GB MSATA SSD it was about $270 total. Edit: fixed the link and added the Note.