This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Fresh From the Press: Latest KB's] Sophos XG Firewall: How to allow Skype for Business through the firewall

Hey Community,

Because Microsoft uses non standard HTTP/HTTPS connections the Sophos XG Firewall's HTTP scanning feature has the potential to prevent Skype for business from working or may cause random call drops. This KB article explains how to allow this traffic through the XG without being scanned.

Regards,

FloSupport | Community Support Engineer

This thread was automatically locked due to age.

0 Terry Bennett over 7 years ago

I have attempted to complete the instructions as per the KB Article, but when I go to add the FQDN Hosts, I get the following:

Does it not like the wildcards? As per the knowledge base article itself, I see the use of wildcards.

Terry
Cancel
Vote Up 0 Vote Down

Cancel
0 Support Chn over 7 years ago in reply to Terry Bennett

I don't think you have option to add wildcard FQDN for v16. It is available only from v17.

You can always go to Web> Exceptions and add wild card FQDN but adding a wild card FQDN to a firewall policy has more advantage since it will exempt the domain from both Web filter and application filter policies.
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 7 years ago in reply to Terry Bennett

Hey Terry Bennett

As Support Chn mentioned above, FQDN hosts will work with SFOS v17.x firmware.

Please let me know if you run into further issues.

Best,
Cancel
Vote Up 0 Vote Down

Cancel
0 Terry Bennett over 7 years ago in reply to FloSupport

Very goods.

Thank you for the replies. I am investigating moving to the 17 series firmware on both my XG135 and XG105. When I attempted to do so previously, it broke my IPSec VPN between my Xg135 and 105. The 105 is in China so it was a bit of a chore to get it back to the 16 series firmware.

Once I can confirm that the IPSec VPN issues are fixed (Hint Hint), I will update both units.

Regards,

Terry
Cancel
Vote Up 0 Vote Down

Cancel