This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disable Email protection/Scanning on Sophos XG

Hello

I have seen a couple of posts with similar question but no straight forward answer was given.

Please advise how can I disable/remove email protection or scanning.

When connected on Sophos and try to send email via outlook on windows PC I get a pop up saying

"""

Internet Secuirty Warning:

The server you are connected  to is using a security certificate that can not be verified

The target principal name is incorrect

Do you want to continue using this server?

"""

When I click yes emails still don't get sent. When connecting to my DSL modem directly I can send mails without any problems or windows pop up.

Please advise a simple way to disable any mail activities on sophos and make it just send the mail traffic without any manipulation as any consumer router will do without the fancy features.

 

Thank you very much



This thread was automatically locked due to age.
Parents
  • Hi  

    Did you configure the email protection in the XG firewall? Is it in MTA mode?

    Is there any scanning applied such as SMTP or SMTPS on the firewall rule from where the email traffic is passing?

  • Hello


    I have rule for internet access that allows any LAN to any WAN service.

    In the rule configuration Nothing is checked on the section "Web Malware and Content Scanning"

    also on the section "Advanced" only NAT is checked and the NAT policy MASQ is selected.


    On Protect > Email > Policies: there are bunch of policies specified. Cant see an option to disable them. Can I disable these?

    On Protect > Email > General Settings: SMTP Deployment Mode Device acts as MTA with an option to change it to proxy

     

    Please advise how do I disable these settings

  • Hi  

    Are you using the web site to access email or any app/email client to access email?

    Which protocol are you using SMTP or POP/IMAP to access email through email client?

    Could you please share the screenshot of the error?

  • Hello

     

    Using outlook to access emails.

    This is the pop up error

     

    Clicking View Certificate

     

    Install Certificate

  • FormerMember
    0 FormerMember in reply to basondole

    Hi  

    If you are not using email protection on the XG firewall, please disable Auto added firewall rule for SMTP/SMTPS. 

    I would also suggest you to create one test firewall rule with your workstations IP address in a source network without any filters and check if this certificate errors disappears or not.

    If you no longer see these certificate errors with this test firewall rule than this traffic might be filtered with web proxy. Please update the outcome of this test.

    Thanks,

  • Hello

    Please  clarify

    You mean I create a firewall rule from LAN Zone with my workstation ip as network to WAN Zone any destination?

  • Is it also required to change this to legacy proxy mode?


    On Protect > Email > General Settings: SMTP Deployment Mode Device acts as MTA

Reply Children