Do you recognize a good idea when you see one? We want to hear from you!
Header Image

UTM (Formerly ASG) Feature Requests

Do you have an idea for Sophos UTM? Do you recognize a good idea when you see one? We want to hear from you!

I suggest you ...

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Remove the link "Add exception for this URL" from the err_ssl.html template

    When the customer gets this alert for example - URL untrusted website warning, within this there is a link called "Add exception for this URL" which re-directs users to the user portal. However this customer gives no access to the user portal for any user.

    The issue is that in the templates page this template is not in the list anywhere so cannot be edited.

    It can be manually removed from the file here but everytime an update is applied it will be over written.
    /var/storage/chroot-http/etc/templates/err_ssl.html

    So customer wants to be able to edit this from the GUI like the…

    1 vote
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Flag idea as inappropriate…  ·  Admin →
    • let us decide, if we want to block the Dropbox app or the Dropbox homepage

      Now automatically both features are blocked, but I just don't want the App on my system. I don't mind if the users use Dropbox via web page.

      4 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        3 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
      • Add IP PBX subscription

        I have a lot of customers that need to install an IP PBX inside their network,
        instead of installing a third party solution,
        Why not Sophos Sg series integrates with Asterisk, as it is open source

        14 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          1 comment  ·  Flag idea as inappropriate…  ·  Admin →
        • 3 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
          • 3 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
            • Implement a UDP helper

              You really need to implement a UDP helper (akin to Cisco's 'ip forward-protocol udp' command) to selectively forward UDP broadcast traffic to other networks. Such traffic is commonly used to auto-discover systems and services.

              1 vote
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
              • Integrate FIDO U2F as form of two factor authentication

                We are heavily using Google Authenticator together with our UTMs but would like the ability to issue a user an open source hardware solution that can go on their key ring. Our power users tend to run out of battery life on phone while traveling and a device on a key chain would allow for ease of access and a knowledge that all users can get in and accomplish the important business items they take care of.

                Our other solutions allow us to use something like a Yubikey Neo and gain access to everything no matter batter conditions.

                Benefits:
                No…

                12 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
                • Removing the internal IP from OWA log in screen

                  I've just set up WAF for my internal Exchange Server and Outlook Web Access. I noticed on the log in screen it says "The server %FQDN of mail server% is asking for your user name and password. the Server reports that it is from %internal IP%.

                  This is such a huge security risk. Anyone attempting to access my mail server knows the internal IP structure. Please remove this from the log in screen!

                  8 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
                  • Source/Destination Tranparent Bypass

                    Similar to this:

                    http://feature.astaro.com/forums/17359-utm-formerly-asg-feature-requests/suggestions/6002140-web-filter-exception-transparent-bypass

                    However, would it be possible to do a source AND destination match only instead of this source or destination?

                    1 vote
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                    • SafeGuard Portable for mac

                      Hi, can we please get SafeGuard Portable for Mac it works great for windows

                      4 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                      • 1 vote
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          0 comments  ·  Logging  ·  Flag idea as inappropriate…  ·  Admin →
                        • Store the SPX password specified in the subject using [secure:<password>] in the UTM for <receiver> so that subsequent e-mails to <receiver>

                          Store the SPX password specified in the subject using [secure:<password>] in the UTM for <receiver> so that subsequent e-mails to <receiver> will be encrypted using that password without the need to specify the password again and again. Let's reset the password for <receiver> using the existing functionality 'SPX password reset'. Or alternatively provide a different way to specify a permanent password for <receiver>.

                          2 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                          • Firewall Change Log reporting

                            Provide the ability to report on all configuration changes on a monthly basis. This is required for many companies that have security controls.

                            3 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                            • Device Management Hotspot from UTM Webadmin

                              Would like to Manage the Devices that are Registerd for an Hotspot Voucher from the UTM Webadmin Page.

                              1 vote
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
                              • [Mail Manager]Japanese mail support of "View" function

                                So as not to mojibake even if Japanese mail is displayed by "View" function, the modification is requested.

                                1 vote
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                • SMTP-Log: Release from Quarantine not visible in log

                                  In the smtp-log view of the mailmanager, any mail released from Quarantine manually by the user is shown as "Delivered". Would be a good idea, to have an additional hint in such cases. The only hint at the moment might be the delivery-time, which in case of a manual release in most cases will be something above one hour (in comparison to a regular delivery, that typically takes only a few seconds).

                                  2 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Add a 2 month option on the Reporting Settings drop-downs.

                                    Add a 2 month option on the Reporting Settings drop-downs. 1month or 3 months is too bigger gap.

                                    1 vote
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  UTM Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Quarantine Report for outgoing mail.

                                      Want to have quarantine report for outgoing mail, and also the user can release the outgoing mail, if the user find it right to send.
                                      Now the outgoing mail is going to quarantined spam, but user is not able to release and to see it in an report.

                                      6 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Notifications  ·  Flag idea as inappropriate…  ·  Admin →
                                      • i need to be able to allow ftp access using filezilla, to a select group of users, in a way that allows virus scanning

                                        we currently use filezilla for a select group of users to get ftp access to the internet, using forefront tmg
                                        we're migrating over to using sophos utm for our firewalls, and i need a method that will allow me to restrict ftp access to a select group of users, while also allowing their downloads to be scanned for viruses

                                        1 vote
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Enable use of network services 'library'

                                          I'm fed up with having to look up port numbers for different online services and add them manually to UTM. UTM comes with a small list (HTTP, HTTPS etc.) - wouldn't it be great to have a centralised library of services (could be maintained by all us UTM Admins?). Just click on the service (e.g. Steam) in the library to have it imported into UTM with all the port numbers defined.

                                          0 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base