Do you recognize a good idea when you see one? We want to hear from you!
Header Image

UTM (Formerly ASG) Feature Requests

Do you have an idea for Sophos UTM? Do you recognize a good idea when you see one? We want to hear from you!

I suggest you ...

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can vote and comment on it.

If it doesn't exist, you can post your idea so others can vote on it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  1. support Radius challenge response

    We needed it for 2fA support with SMS PASSCODE

    103 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      1 comment  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
    • Youtube and blocking specific categories

      Coming from another vendor one of the features I like/had was that I could block categories within YouTube. We are a School District that needs to access YouTube (YouTube for Education has limited content). It would be nice to setup a policy or rule to be able to block these YouTube Categories.

      Currently available categories are:
      • Film
      • Autos
      • Music
      • Animals
      • Sports
      • Shortmov
      • Travel
      • Games
      • Videoblog
      • People
      • Comedy
      • Entertainment
      • News
      • Howto
      • Education
      • Tech
      • Nonprofit
      • Movies
      • Movies_anime_animation
      • Movies_action_adventure
      • Movies_classics
      • Movies_comedy …

      52 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        1 comment  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
      • let admin disable „Sophos Outlook Add-in“ in User-portal like all the other Apps.

        The UTM-Admin can disable unused items with "Disable Portal Items".
        All items but "Sophos Outlook Add-in".

        29 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          3 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
        • SPX Reply Portal Attachments

          The built in "Reply Portal" for SPX should allow the recipient to attach files with their reply.

          87 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            4 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
          • Use Perfect Forward Secrecy for SMTP Proxy

            Use PFS for SMTP Proxy, now it still supports RC4 which is a very weak Cipher.

            35 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              1 comment  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
            • Quarantine release HTTP Port

              Ability to change the Quarantine release HTTP port to a port below 1024.

              24 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
              • Native Microsoft Azure Site-to-Site VPN

                Sophos UTM already natively supports automatic site-to-site VPN tunnels with BGP routing to AWS. I look forward to Sophos UTM supporting the same sort of site-to-site VPN tunnels with BGP to Microsoft Azure in public and private cloud deployments.

                I think the easiest way for this to work would be for Sophos UTM to look at the requirements of getting the VPN itself setup (which has been documented in the forums and works), then to make BGP work on top of that, then ensure that BGP and the VPN can work between multiple private cloud and public cloud sites, then…

                40 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  5 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                • 50 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    7 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                  • Fix UTM Licensing To Expire IPv6 Temporary Addresses Faster

                    Fix UTM licensing to "age out" faster the many IPv6 "temporary addresses" that are created by most devices (running Windows, Mac OS X, iOS, Android, Linux). As an example, I have 12 devices connected to my network, but because I run in an IPv4/IPv6 environment, UTM is currently counting 113 IP addresses and sending me daily warnings that I have exceeded my license count and no new devices can be added to the network.

                    In the forum post linked below I have gone into greater detail, but the issue essentially is that in 2014 almost every IPv6-capable device is generating…

                    19 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                    • Support for HUAWEI E3531 3G USB UMTS Stick

                      Add Huawei E3531 USB 3G Dongle to the compatible list

                      32 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        5 comments  ·  Operating System  ·  Flag idea as inappropriate…  ·  Admin →
                      • Allow for at least logo customization of the User Portal and WebAdmin page.

                        Would like to see the capability to extend at LEAST logo customization of the User Portal page. Ideally it would be beneficial to modify the logo for the WebAdmin portal as well, however the User Portal customization is critical if we are to position this solution against competing products from Juniper (MAG), Palo Alto, and Fortinet.

                        21 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                        • Import IP addresses from txt or CSV file to network definitions in Web Manager

                          I have over 3500 IP addresses I need to add into my network definitions. I need to add them all to firewall definitions. It would save me so much work if I could just import these IP addresses as a CSV into a bunch of network definitions.

                          It would be even more advantageous if I could import the IP addresses to network definitions and have them all automatically go into a network group.

                          30 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            2 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                          • dyndns support for all-inkl

                            Hi,

                            please can you add all-inkl as dyndns provider. Server for Updates at all-inkl is: dyndns.kasserver.com

                            Thanks in advance,
                            regards
                            Herbert

                            18 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              2 comments  ·  Flag idea as inappropriate…  ·  Admin →
                            • Update dyndns hostname with the public IP address used by RED to connect to UTM

                              UTM already shows in the main RED tab the IP addresses used by the RED devices do connect to the UTM. It would be great if this IP address could be used to update a dyndns host name and thus allow monitoring if the internet link of the remote side of the tunnel, when dynamically assigned IP are used on the remote side. Today, on a dropped RED connection, there is no way to know if the problem is with the remote internet link or the tunnel between sites.

                              15 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Remote Ethernet Device (RED)  ·  Flag idea as inappropriate…  ·  Admin →
                              • SPX Encryption > Receiver Password Portal Setup & Reset

                                A way to remove the need for Password Notifications send to User, Administator or Other. An external facing portal page that allows a notice to be sent to the receiver for them to register w/ e-mail verification to setup to access their password for the SPX attachment. Basically allowing a local service similar to Cisco RES for messages sent from your Sophos UTM. Obviously, this could be limited in that if a per-email password is used by the sender it would not be able to work. Also a password reset would only work for future e-mails as the PDF is…

                                44 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  5 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                • Backup databases/reports/data on the Sophos UTM in addition of the system configuration.

                                  Backup databases/reports/data on the Sophos UTM in addition of the system configuration.

                                  13 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Server Load Balancing: Alternate internal port than external

                                    Just like NAT allows, let us choose an alternate port to redirect traffic to on the internal servers. Right now, whatever is external is internal, and it forces us to use NAT which kills any option to have high-availability and load balancing.

                                    58 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      2 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Implement a console type interface into the UTM for controlling the endpoints.

                                      The UTM endpoint protection should have a way to view the quarantine items on the endpoints and authorise or clean what it has discovered. If the application is to be authorised there should be a way to auto add this directly to the exceptions policy. The ability to run a scan of the endpoint from the UTM should also be included. Currently the UTM implementation of the endpoint protection is more like a notice than a central management point, meaning the admin has to go to the machines in question (either physically or with a remote connection) to investigate the…

                                      14 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        2 comments  ·  UTM Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Enhance Application Control App Categorization

                                        Lot of people would like to be able to easily block advertisers, web trackers and analyzers to enhance their surf experience in general and to enhance privacy too by blocking all those trackers and analyzers.

                                        There are already >150 of such advertisers, trackers and analyzers as apps in the UTM's application control. Sadly all of them are categorized as "web services", which is misleading andunhelpful, as in this category are also CNET and Mozilla downloadservers, CDN's as Akamai etc., whic disallows a simply general block af that category.

                                        I propose, that this "web services" category will be splitted further into …

                                        64 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Application Control  ·  Flag idea as inappropriate…  ·  Admin →
                                        • SPX

                                          Now that UTM 9.2 supports outgoing SPX email encryption i'd like it to also offer the same recipient self registration portal for password management based on user similar if not exactly the same as the existing Sophos Email Appliance.

                                          I think this would get many of my clients with existing firewall/vpn infrastructure who are also looking for email encryption off the fence and buy into the UTM. Unfortunately the encryption piece as it stands now is a bit tedius and isn't as user friendly as it could be

                                          22 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 93 94
                                          • Don't see your idea?

                                          Feedback and Knowledge Base