Can we whitelist yet? If not, how long?

Hi Ben,

Whitelisting is available when SMTP Deployment mode is set to Legacy mode in Sophos XG. Go to, Email Protection | General Settings | SMTP Deployment mode | Legacy. Refer, Allow or Block Emails using a Whitelist or Blacklist.

If you specifically need the whitelisting option with MTA mode then please raise a feature request on Sophos Ideas. I am unable to discover any existing feature request.

Thanks

Yes but turning on legacy mode is effectively disabling all the best parts of email protection and just passing everything through to the next layer, this is not a solution. I bought XG because I liked the quarantine digest feature from the UTM and how easily false positives can be released by staff without admin involvement.

Here is a request with 95 votes: https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/15977194--email-protection-urer-portal-users-to-have-abil 

If all 95 of those votes are from IT managers like myself, that could easily be anywhere between 9,000-20,000 end users waiting for the white list function. What are the XG devs doing? : /

Did I miss something or did v17 still not include whitelisting?

Hello Ben,

the whitelisting is planned for v17.1 in January next year. 

Regards

alda

Ah brilliant that's fantastic news! :)

Ben,

it's planned, not implemented, I'll celebrate until it's (finally) implemented ....

Regards

alda

[:P]

Woohoo! We have the functionality. Thank you oh merciful Sophos Devs! [:D]

Hi,

I would like a option to select a group with email users instead of adding e-mail addresses manually

Also an option to edit the file allow/blocked manually with ssh or even better to schedule a download of the whitelist or blacklist from an internal server to update it.

My fellow XG comrades!

We have been deceived this functionality is only for the crap side of email protection which nobody uses. (Legacy AKA glorified port forwarding)

When configured as a proper MTA the XG is STILL incapable of whitelisting :( 

I think this is the final nail in the coffin for me, time to google for alternatives :(

I have just logged a call because whitelisted emails were still being blocked and the response was that it is not supported for MTA mode.

:(

Hi,

did you try to use the Whitelist under General Settings in MTA Mode?

Cheers

That is what I am referring to, I thought it was ready to go but apparently it's not finished. This is what I received from a support consultant:

Hi Ben,

This is regarding your service request number 7848930 with the reported issue.

May I know which mode are you using for Email Scanning?

If it is MTA mode, please follow the below KB Article:


-----------------------------------------
Article ID: 128049
Title: Sophos XG Firewall v17: How to whitelist or blacklist email senders
URL: https://sophos.com/kb/128049
-----------------------------------------

If it is in MTA mode then it will not work for now as it is a feature request.

Do let me know if I've answered your query.

Please contact us for any further assistance.

Short question, do you want to whitelist a domain / address as a admin in the webadmin or do you want to give your user a possibility to whitelist? 

Can you DM me the prober awarrenmta Log of the Mail, which is quarantine? 

Short question, do you want to whitelist a domain / address as a admin in the webadmin or do you want to give your user a possibility to whitelist? 

Can you DM me the prober awarrenmta Log of the Mail, which is quarantine? 

I am happy to do either so long as the result is the same, we are a firm of accountants and we just want to white list HMRC whom we receive notifications from all day every day.

Do you have some instructions for collecting that log?

Thanks for your time.

Will DM you the instructions.