XG / XGS ongoing issues list

OK - Let me rephrase the point about #3. 

In general SMTP Relay works fine. 

SMTP Auth is something, which is not RFC standard. This means, you cannot do an authentication against SFOS using SMTP Auth. This is often times used from WAN devices to use the firewall/MTA to relay to the internet back. This is not working.

If you use the Host based Relay option, there is no problem (and in general it is the same - IP based or Auth based relay will do the same). SMTP auth would be "more flexible" tho. 

So the part about "Relay to O365" should not be a problem, if its a internal network device. If you have a external device (like a service), there could be a potential limitation. 

And to rephrase my point earlier: Personally i see a potential problem in using a MTA Relay firewall for this option. Simply because the firewall (UTM and SFOS) does not offer the proper tools to track this. So you are starting to have multiple point of Email history (for example Exchange and the firewall) which have different histories. The logging on your mail product like exchange is incomplete etc. 

WAN Link manager is to load balancing. So the WAN Link manager is used for "Default Gateway behavior". If the firewall needs a Default GW, WAN link manager will give you a feedback, which Link to use. 

Essentially you are discussing a missing feature, which will pick up a renewal process of the IP based on the WAN Link Manager. And that is tracked to be discussed. 

It is based on the technology. PPPoE Interfaces will do this (based on the used technology). But it seems like, there are other ISPs, only giving you a IP based on ethernet protocol (which is unusual for my field - ISPs are not doing this often times here - I cannot speak for other regions). 

I found a new issue... another issue that should not be an issue. 

So I wanted to test out a static routing change on an XG Firewall. I needed to disable a route... then build and apply a new one, before confirming that it was working. I didn't want to delete the route in case it had some negative ramifications, so that I could quickly revert back if needed. And wouldn't you know... you can't disable a static route in XG. It's not possible. Your only option is to document the settings and delete it. I mean seriously... why are basic functions just missing or broken on XG. We have an active license and maintenance...

And of course... I take a look at my SOPHOS SG Router... and HEYYYY toggle buttons for static routes. I can disable and enable whenever I need to.

Am I missing something? Or is SOPHOS just doing a bad job here? Can someone confirm this is still missing on XGS?

You can / should move to SD-WAN routes anyway. Those are far superior and you can disable them as well. In most scenarios, they are working more effectively. Depending on the scenario you are using. For example, you need a gateway for SD-WAN Routes. In Static routes, you need to do this every time. In SD-WAN you are using the already created GWs. 

In your example: Create a GW (your Gateway CDK router), then create those 3 routes as SD-WAN Routes. 

So to confirm specifically on this one... the ability to disable static routes is available on XGS?

Steve Klassen said:

the ability to disable static routes is available on XGS?

Isn't possible, you can only add or delete.

So when LuCar Toni confusingly implied that "you can", he meant... "you can't". And here is a workaround... Perfect. Clear as mud.

Thank you Prism for clarifying.

I don't understand why SOPHOS won't do improvements to avoid these negative issues so migrating to XG/XGS is a "no-brainer" rather than an exercise in the issues and and "what i'll lose" by doing it. I know there are benefits... but if there weren't issues, then it would be a slam dunk. And ALL of these complaints are within SOPHOS' ability to fix. And they don't??? 

It just doesn't make sense, and it concerns me greatly about their dedication and speed on fixing issues in general, if these issues are not being addressed. And each time I use XG/XGS, I stumble across more.

Sigh... it's monday. 

He's telling you to use the new SD-WAN function instead of static routes, with SD-WAN routing you can disable/enable them as you wish.

But for static routes it isn't possible. (you can't disable/enable them.)

Steve Klassen said:

I don't understand why SOPHOS won't do improvements

No one knows, if you do please let us know here in the community.

You can turn SD-WAN routes ON and OFF, have a look yourself here:

It is indeed available for SD-WAN, but the question has specific about why It isn't available with the static routing function.

Edit: Removed some content since It shouldn't be discussed in here.