Sophos UTM: Very slow connection via WAF / Sensor for PRTG

A reader recently told me about a problem with the Sophos UTM web application firewall. Due to the Corona crisis, many of the employees have moved to the home office and have since been using more connections to the Exchange server, which are protected by the WAF of the Sophos UTM. So after there was a higher load on the UTM during the day ... Read more

Sophos UTM: Export WAF certificate using PowerShell (Exchange version)

In this article, I already described how the Sophos UTM certificate can be exported via REST API. A few people have now reported that an automatic export and import for Exchange Server is interesting. I have therefore extended the script and successfully tested the export and import with Exchange Server 2016. ... Read more

Sophos UTM 9.5: Web Application Firewall und SSL Labs A+ Rating

Sophos hat kürzlich das Update auf die Version 9.5 für die UTM veröffentlicht. Eine der Neuerungen UTM 9.5 ist die Möglichkeit die TLS-Version für die Web Application Firewall einzustellen. Das reicht allerdings noch nicht um bei dem SSL Server Test von Qualys SSL Labs ein A+ Rating zu bekommen. Zwar ist ein A-Rating nicht unbedingt … Read more

Sophos XG: Exchange 2016 and SFOS 16.05 Webserver Protection (Part 3 Optional)

In article 2, I had already written my opinion on RPCoverHTTP (Outlook Anywhere) in conjunction with Sophos XG and two public DNS names. Here again briefly to repeat: The background is that most of the protection mechanisms of the web server protection for Outlook Anywhere must be switched off. This then also applies to the remaining web services such as OWA ... Read more

Sophos UTM 9.4 WAF and Exchange 2016

Für Exchange 2010 und Exchange 2013 hatte ich ja hier bereits Artikel für die Sophos UTM Webserver Protection (WAF) veröffentlicht. Da es aber mittlerweile Exchange 2016 veröffentlicht wurde und auch die Sophos UTM in einer aktuelleren Version vorliegt, gibt es an dieser Stelle mal wieder ein Update. Umgebung (UTM und Exchange) Exchange Server 2016 CU1 … Read more