Sophos Firewall: v18.5 MR1: Feedback and experiences

You're looking at the wrong place.

The picture you just sent are just the URL Groups that are use on the TLS exception, not the exceptions itself.

Look again on the picture I've sent above.

all that does is disable the rule not the exception list. If you review the web exception lists there are disable buttons, but the TLS list does not have the same feature.

Ian

Sorry Ian, i am still confused, what you mean. The URL Lists, you linked are used as "Websites" in TLS/SSL DPI. You cannot remove the Local URL List. But remove all others. You can create your own List and rules. 

What exactly do you want to disable and why? 

I was trying to test my own ssl/tls rule to see if I could replace the web proxy in some of my rules but failed because of the default list.

ian

We are overkilling this thread. Please create a new thread to discuss this issue. 

Issue 'Any experience with an excessive number of ThunderVPN hits?' described by ARandomHerdFan is directly related to the MR1 update in my situation: Any experience with an excessive number of ThunderVPN hits? - Discussions - Sophos (XG) Firewall - Sophos Community

See: https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=18.5

Just upgraded to build 326, problem with the wildcard still exists.

This was not included in the fix for GA as this seems to require more work. But was included to the Known Issue List:

docs.sophos.com/.../index.html

Thanks, just upgraded my firewall to GA.

Good to see It has been fixed.