Guest User!

You are not Sophos Staff.

XG GUI accuracy and IPS issue

Hi folks,

a little issue about accuracy of the GUI and then the reports when you click on the GUI widget.

The IPS issue has nothing to do with the new IPS settings, this issues occurred in previous XG SFOS and HWOS versions.

According to the report two devices on my network are attacking an RSPs mail server. The report shows IMAP is that inclusive of iMAP and iMAPS? I just iMAP then it is a false positive because iMAP is not used, just iMAPS.

Why does the attack only occur on a very small number of occasions and not every time mail check is performed?

Finally where in logviewer do I find these records so I can examine them for time etc?

Ian

Parents Reply Children
  • They have magically appeared. The tab showed no records when preparing this thread.

    Now the next issue is none of my mail clients are using 143, yet the log shows 143 as being the culprit. Always to one server even though there are accounts on number of RSPs. Only happens from the mac air and the Mac mini, not the iPhones or iPad.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • Sorry a bit grumpy. I have been trying to sort the IPS issue since I put the XG115w on line.

    I have disabled imap scanning and removed imap from the mail firewall rules.

    The issue is intermittent, might be  couple of days with nothing then a couple or so entries.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.