Hi,
I have running some rules from third party tool using logs from Sophos XG Firewall version SFOS 17.5. Some of the rules are based on specific IDs from
https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/LogMessages.html and the PDF version on
My problem is:
Now, i have to upgrade the rules to Sophos XG v19 MR, and there is no documentation. When i review the forums, some people say that we have to use 18.5 on
but, some IDs like list below are only in documentation of v17.5 in html format: https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/LogMessages.html
ID:
- 010202130 (ftp bouncing attack)
- 010202126 (land attack)
- 010202128 (winnuke attack)
Please, any ideas of where i can find full messages IDs list and description for v19 or 18.5?
Thanks in advance
This thread was automatically locked due to age.