This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can we whitelist yet? If not, how long?

Just wondering when the option to whitelist is going to be added? We have been using the XG for some time now and many users are repeatedly asking why we can't prevent clients emails from going into quarantine every day >.<

The ability to whitelist is kind of a basic requirement of any half-decent anti-spam solution. Why doesn't the XG have this?

Need to get an estimated date for this soon or we will have to go elsewhere for email protection, which would be a crying shame when everything else is we run is Sophos (Firewall/VPN/RED/Wi-Fi/Endpoint Protection)

Thanks

This thread was automatically locked due to age.

Parents

0 sachingurung over 8 years ago

Hi Ben,

Whitelisting is available when SMTP Deployment mode is set to Legacy mode in Sophos XG. Go to, Email Protection | General Settings | SMTP Deployment mode | Legacy. Refer, Allow or Block Emails using a Whitelist or Blacklist.

If you specifically need the whitelisting option with MTA mode then please raise a feature request on Sophos Ideas. I am unable to discover any existing feature request.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben Newall over 8 years ago in reply to sachingurung

Yes but turning on legacy mode is effectively disabling all the best parts of email protection and just passing everything through to the next layer, this is not a solution. I bought XG because I liked the quarantine digest feature from the UTM and how easily false positives can be released by staff without admin involvement.

Here is a request with 95 votes: https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/15977194--email-protection-urer-portal-users-to-have-abil

If all 95 of those votes are from IT managers like myself, that could easily be anywhere between 9,000-20,000 end users waiting for the white list function. What are the XG devs doing? : /
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Ben Newall

Ben is right!

We hope to see an improvement of XG into v17 on email protection.

Almost useless XG as MTA at the moment.

[:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben Newall over 7 years ago in reply to lferrara

Did I miss something or did v17 still not include whitelisting?
Cancel
Vote Up 0 Vote Down

Cancel
0 alda over 7 years ago in reply to Ben Newall

Hello Ben,

the whitelisting is planned for v17.1 in January next year.

Regards

alda
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben Newall over 7 years ago in reply to alda

Ah brilliant that's fantastic news! :)
Cancel
Vote Up 0 Vote Down

Cancel
0 alda over 7 years ago in reply to Ben Newall

Ben,

it's planned, not implemented, I'll celebrate until it's (finally) implemented ....

Regards

alda

[:P]
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben Newall over 7 years ago in reply to alda

Woohoo! We have the functionality. Thank you oh merciful Sophos Devs! [:D]
Cancel
Vote Up 0 Vote Down

Cancel
0 Renede Bie over 7 years ago in reply to Ben Newall

Hi,

I would like a option to select a group with email users instead of adding e-mail addresses manually

Also an option to edit the file allow/blocked manually with ssh or even better to schedule a download of the whitelist or blacklist from an internal server to update it.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben Newall over 7 years ago in reply to Renede Bie

My fellow XG comrades!

We have been deceived this functionality is only for the crap side of email protection which nobody uses. (Legacy AKA glorified port forwarding)

When configured as a proper MTA the XG is STILL incapable of whitelisting :(

I think this is the final nail in the coffin for me, time to google for alternatives :(

I have just logged a call because whitelisted emails were still being blocked and the response was that it is not supported for MTA mode.

:(
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 7 years ago in reply to Ben Newall

Hi,

did you try to use the Whitelist under General Settings in MTA Mode?

Cheers
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 7 years ago in reply to Ben Newall

Hi,

did you try to use the Whitelist under General Settings in MTA Mode?

Cheers
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Ben Newall over 7 years ago in reply to LuCar Toni

That is what I am referring to, I thought it was ready to go but apparently it's not finished. This is what I received from a support consultant:

Hi Ben,

This is regarding your service request number 7848930 with the reported issue.

May I know which mode are you using for Email Scanning?

If it is MTA mode, please follow the below KB Article:

-----------------------------------------
Article ID: 128049
Title: Sophos XG Firewall v17: How to whitelist or blacklist email senders
URL: https://sophos.com/kb/128049
-----------------------------------------

If it is in MTA mode then it will not work for now as it is a feature request.

Do let me know if I've answered your query.

Please contact us for any further assistance.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 7 years ago in reply to Ben Newall

Short question, do you want to whitelist a domain / address as a admin in the webadmin or do you want to give your user a possibility to whitelist?

Can you DM me the prober awarrenmta Log of the Mail, which is quarantine?
Cancel
Vote Up 0 Vote Down

Cancel
0 Ben Newall over 7 years ago in reply to LuCar Toni

I am happy to do either so long as the result is the same, we are a firm of accountants and we just want to white list HMRC whom we receive notifications from all day every day.

Do you have some instructions for collecting that log?

Thanks for your time.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 7 years ago in reply to Ben Newall

Will DM you the instructions.
Cancel
Vote Up 0 Vote Down

Cancel