IP reputation stopped

furthermore... if this is an expected action then why does a reboot clear it?

Update on this, I'm following up with internally with the product team to provide more information.

Regards,

I am seeing this too.

I am curious, from what I have read here https://community.sophos.com/kb/en-us/123119#:~:text=IP%20Reputation%20is%20a%20global,in%20the%20spam%2Fsecurity%20policies.

This service is for email IP address verification against your (sophos) database.  Does the service complete any other actions?  And or can we disable the system from shutting off services to save on resources until a fix can be pushed out?

I also agree that if this is disabled by the firewall to save on resources than it should not flag an alert.  This is something I would think any software tester would catch when making the change before going public with it.

Finally what other services does this service within the firewall have the ability to disable?  What if that were to become a vulnerability?

Hi Badrobot 

Please see my updated answer above.

Thanks for the clarification.  Will this make it into a KB?

Also - can you please advise how firewalls that have been running fine suddenly displayed this alert.  Did Sophos issue a hotfix to stop the services? If so - what hotfix?

It feels a little concerning that this has happened without any notice or advice from Sophos, and I'm trying to ensure my techs know what is good and what is not.  Without notification it makes it very hard to do so.

Thanks Flo, 

Appreciate it!

Hi All, 

Please find the below updated KB article for this. 

• Sophos XG Firewall: IP reputation service showing stopped

Thanks for that.  Glad it's documented :-)