Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 21 replies
  • Answers 3 answers
  • Subscribers 31 subscribers
  • Views 3370 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SPX Portal Not Working

Craig Glaser

Trying to get SPX email encryption working. Sophos XG Home v 18.0.4-MR4

The email protection is set up as MTA mode.  Normal email routing and deliver is working fine.

I've created the SPX template and when I try to send an email with the SPX header set to yes, the firewall holds the emails in quarantine as it should since the user has not created a password yet,, and sends the SPX registration email, which is received by the end user The link in the email is correct. The link properly resolves to the firewall's WAN interface IP.

However, clicking on the link results in a 'This Site cannot be reached' page.  Reason:  Connection Refused.

When I do a packet capture on the firewall, I see the request coming in on the correct port, and the status for the packed is 'Consumed'. 

Nothing is logged on the firewall report indicating anything is dropping or rejecting the request.

I'm stumped here.  Tried rebooting the firewall, recreating the SPX template, re-configuring the encryption settings.  

Any help would be appreciated.



This thread was automatically locked due to age.
Parents
  • 0

    Can anyone confirm if this is a bug or if it's a limitation on the XG Home license? 

    Basically, I'm still stuck where, the SPX portal is only available if I use the template to have ALL emails I send be encrypted, but the portal doesn't appear to work if you want emails to be conditionally encrypted (i.e. via Outlook plug in or via setting the SPX-X Header to 'Yes').

    IT seems to me the that without the template telling the device to encrypt all emails, it never starts the portal service.

    At this point I'd just like to know if it's a known bug or a known limitation with the current firmware(s) or home license.

  • 0 in reply to Craig Glaser

    Hi  This functionality of having SPX encryption working with the Outlook Add-in (setting a value on the SPX-X header) on the XG has been reduced.

    To apply this SPX template in MTA mode, you must select the template in the SMTP route and scan policy under Domains and routing target or Data control list.

    Help section updated with reference to same:

    docs.sophos.com/.../EmailEncryptionMTA.html

  • 0 in reply to Vishal_R

    Hi : Please verify the settings on your XG as per above last comment and confirm the status of SPX portal.

  • 0 in reply to Vishal_R

    I'll try this later this today.  Looking through the updated online documentation, I think using a DP policy will work for me if the Outlook plugin functionality has been reduced.  But I will let you know.

  • 0 in reply to Vishal_R

    I can confirm that using a Data Control Policy does work.  I tested with a custom Data Control Policy with just the 'Sensitive Content Marker  (Global)' CC selected in it.  This triggers an encrypted email anytime I place the string 'CTRL:XX' in the subject or body.  The Portal is available and all seems to be working.  Emails without that string in them are sent unencrypted.

    Thank you very much.

Reply
  • 0 in reply to Vishal_R

    I can confirm that using a Data Control Policy does work.  I tested with a custom Data Control Policy with just the 'Sensitive Content Marker  (Global)' CC selected in it.  This triggers an encrypted email anytime I place the string 'CTRL:XX' in the subject or body.  The Portal is available and all seems to be working.  Emails without that string in them are sent unencrypted.

    Thank you very much.

Children