I have Sophos XG running on my home network (no servers) and I'm trying to understand how the email scanning features work in Sophos XG. I don't run an email server at home, I use email services such as Gmail and iCloud. By default, Sophos XG comes with the email service running in MTA mode. In this mode, I can receive emails but cannot send them out (always receive a connection error message to the smtp server). After doing some research hear, what I gather is MTA mode should be used if you're running a mail server on your network, which is not what I'm doing.
So the first question I have is - is Legacy Mode the preferred or required mode for home use (i.e. no mail servers)?
When I switched to Legacy Mode, I can send and receive emails with no issues. However, I'm confused as to whether or not I need to create a firewall rule to scan all my emails. By default, when I switched to the Legacy Mode, several policies were created on the Policies tab on the Email page (see image below).
Are these policies actually in effect or do I have to create a separate firewall rule? The reason I ask is because without a firewall rule, I see nothing happening in the Log Viewer. When I create a firewall rule as pictured below, I now see activity in the Log Viewer from email traffic.
Are each of the options under 'Malware Scanning' some how related to the Email policies?
This thread was automatically locked due to age.
