Sophos XG Home and malware detection

Are you doing TLS Decryption?

Right now on the EICAR page your only able to download the test files through HTTPS, in order for the Firewall to scan the encrypted traffic it needs to decrypt it first.

If you download the EICAR file through a HTTP (plain-text) connection (on another website) the firewall will catch and block it; If not, please report here.

Where would I turn on that TLS decryption?  Obviously, my Cyberoam box does this, and I migrated the Cyberoam settings.  Which buttons do I have to press?

Thanks for the very quick response!

Volker

You can find more information here: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/SSLTLSInspectionRules.html

You can find more information here: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/SSLTLSInspectionRules.html

Thanks again.  I had TLS decryption turned on (thats good), but there is an exclusion rule present, (that’s bad) which I did not create.  Going to RTFM

 with best regards from Germany

Volker

Reading TFM is not really a problem for me, but F inding  TFM sure is :) . Anyhow, your link did help and I am now on my way … to the next roadblock!