Do you recognize a good idea when you see one? We want to hear from you!
Header Image

UTM (Formerly ASG) Feature Requests

Do you have an idea for Sophos UTM? Do you recognize a good idea when you see one? We want to hear from you!

I suggest you ...

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can vote and comment on it.

If it doesn't exist, you can post your idea so others can vote on it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  1. Sophos VPN app for mobile platforms

    Sophos should develop an own VPN app for mobile operating systems (iOS / Android / Windows Phone) which can connect via the UTM using the configuration pushed from the UTM to the SMC server.
    It should also support the Per-App-VPN feature which was introduced in iOS 7.

    73 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      4 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
    • support Radius challenge response

      We needed it for 2fA support with SMS PASSCODE

      118 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        2 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
      • let admin disable „Sophos Outlook Add-in“ in User-portal like all the other Apps.

        The UTM-Admin can disable unused items with "Disable Portal Items".
        All items but "Sophos Outlook Add-in".

        61 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          8 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
        • Youtube and blocking specific categories

          Coming from another vendor one of the features I like/had was that I could block categories within YouTube. We are a School District that needs to access YouTube (YouTube for Education has limited content). It would be nice to setup a policy or rule to be able to block these YouTube Categories.

          Currently available categories are:
          • Film
          • Autos
          • Music
          • Animals
          • Sports
          • Shortmov
          • Travel
          • Games
          • Videoblog
          • People
          • Comedy
          • Entertainment
          • News
          • Howto
          • Education
          • Tech
          • Nonprofit
          • Movies
          • Movies_anime_animation
          • Movies_action_adventure
          • Movies_classics
          • Movies_comedy …

          90 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            1 comment  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
          • Webserver Protection: Reverse Authentification with NTLM and Kerberos

            The Reverse Authentification feature (UTM 9.2) for WAF is a nice progres, but I'm hoping that it will soon be extended. There are many scenarios that require at least NTLM; Kerberos would be nice as well. Yes, we are coming from TMG :-)

            19 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Web Server Protection  ·  Flag idea as inappropriate…  ·  Admin →
            • SPX Reply Portal Attachments

              The built in "Reply Portal" for SPX should allow the recipient to attach files with their reply.

              98 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                4 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
              • Fix UTM Licensing To Expire IPv6 Temporary Addresses Faster

                Fix UTM licensing to "age out" faster the many IPv6 "temporary addresses" that are created by most devices (running Windows, Mac OS X, iOS, Android, Linux). As an example, I have 12 devices connected to my network, but because I run in an IPv4/IPv6 environment, UTM is currently counting 113 IP addresses and sending me daily warnings that I have exceeded my license count and no new devices can be added to the network.

                In the forum post linked below I have gone into greater detail, but the issue essentially is that in 2014 almost every IPv6-capable device is generating…

                32 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  2 comments  ·  Flag idea as inappropriate…  ·  Admin →
                • dyndns support for all-inkl

                  Hi,

                  please can you add all-inkl as dyndns provider. Server for Updates at all-inkl is: dyndns.kasserver.com

                  Thanks in advance,
                  regards
                  Herbert

                  36 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
                  • Native Microsoft Azure Site-to-Site VPN

                    Sophos UTM already natively supports automatic site-to-site VPN tunnels with BGP routing to AWS. I look forward to Sophos UTM supporting the same sort of site-to-site VPN tunnels with BGP to Microsoft Azure in public and private cloud deployments.

                    I think the easiest way for this to work would be for Sophos UTM to look at the requirements of getting the VPN itself setup (which has been documented in the forums and works), then to make BGP work on top of that, then ensure that BGP and the VPN can work between multiple private cloud and public cloud sites, then…

                    57 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      5 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                    • URL Redirection

                      It would be great if it would be possible to redirect certain URLs

                      For example:

                      www.company.com => www.company.ch/site1
                      www.company.com/site1 => www.company.com/newsite

                      Thank you :)

                      35 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        1 comment  ·  Web Server Protection  ·  Flag idea as inappropriate…  ·  Admin →
                      • add internet speed test to support tools

                        Add an internet speed test (using something like speedtest-cli or a nagios check_speedtest-cli) to the management interface support tools. This check should bypass DPI, IPS/IDS, AV, etc. so users can tune the security services for optimal protection and speed. This could also be used as a reference when setting up QoS or even as variables in QoS settings as internet traffic speeds often are increased without user knowledge and the current QoS bandwidth settings are static. Periodically check internet speeds and report in the network graphics and executive reports.

                        10 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  Management  ·  Flag idea as inappropriate…  ·  Admin →
                        • User-defined field for DynDNS

                          My idea: DynDns field for user-defined Update-URL to use all DynDNS providers and Features like MX-Record and A-record.

                          So it is not necessary, to put all DynDNS providers in the choise field.

                          17 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            1 comment  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                          • waf report

                            The executive report could show the attacks detected and blocked by the WAF.

                            9 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                            • Allow for at least logo customization of the User Portal and WebAdmin page.

                              Would like to see the capability to extend at LEAST logo customization of the User Portal page. Ideally it would be beneficial to modify the logo for the WebAdmin portal as well, however the User Portal customization is critical if we are to position this solution against competing products from Juniper (MAG), Palo Alto, and Fortinet.

                              25 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                1 comment  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                              • Quarantine release HTTP Port

                                Ability to change the Quarantine release HTTP port to a port below 1024.

                                24 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                • 50 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    7 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Forward public IP to real web server

                                    CheckBox that allow to send the Public IP of client, instead that private IP of internal interface of WAF, to real web server.

                                    This to allow IIS and script to retrieve information for statistic and security/configuration check.

                                    Regards

                                    10 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      3 comments  ·  Web Server Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Enhance Web Antivirus Configuration

                                      Currently we only have the option of selecting one, two or both antivirus engines (Sophos/Avira/Both). There does not appear to be anywhere to edit the settings of these scanning engines. I know from using both Sophos and Avira on desktops that they have numerous settings. Avira in particular allows the user to change heuristic sensitivity (high/medium/low) and also enable macro heuristics. With Avira you can also select what you want to include in detection (eg dialers/jokes/phishing, as well as traditional malware). Sophos Anti-Virus has the option of enabling detection of 'suspicious files' also, which I should imagine is Sophos' heuristic…

                                      9 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        1 comment  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Display Web Protection Usage Reports by Hour or Minute

                                        Currently web usage reports in Web Protection are only searchable on a daily basis, the only way to get reports for specific hour of traffic or 10 minute periods is by utilising "Search Log File" function which is not displayed in a management friendly report even when utilising "Display in Report Format". Having the web usage reports selectable by time not just date would allow for much more management friendly reporting.

                                        8 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Support for HUAWEI E3531 3G USB UMTS Stick

                                          Add Huawei E3531 USB 3G Dongle to the compatible list

                                          32 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            5 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 96 97
                                          • Don't see your idea?

                                          Feedback and Knowledge Base