S2S VPN
I'm not sure this belongs here, but I'm having some SSL site-2-site VPN issues with version 9. (Running on Vmware 4) I have 2 VPN connections to an UTM. The UTM that's being used for the server...
View Articlehigh memory usage HA cluster
hello we have 2 sophos utm 220 appliances running in HA cluster warm standby currently we are running 9.002 2 processes relating to postgres are using respectively - 27% slon asg_cluster...
View Article[question] RED50 Buttons
Hi, there are four buttons on the front of RED50. What can I do with them? Sven
View ArticleIOS Cisco IPSec and Client NAT
Hi, I've setup the Cisco IPSEC Client on IOS devices and this is working correctly as long as the Astaro does not detect NAT on the client. I've been reading through the forums and found a host of...
View Article[BUG] No Traffic through Tunnel possible (from external)
Hi, I try to replace a RED10 by a red50. I established the red50 tunnel with one WAN interface and one UTM entry. I switched the Interface to red50. But now there is no traffic possible. ASG has no...
View Articlebroken links due to forum renaming
I understand that the word "Astaro" will disappear eventually, but the ham-handed change of directory names was done without fixing the many links inside posts to allow them to continue to point at...
View ArticleUnfindable KB articles
Were many Astaro articles left off the new site? Have the names changed to make them unfindable? Is anyone at Sophos working on this? I'll be at the Sophos meeting in Dallas tomorrow. You can bet I'll...
View ArticleWhere are ASG links to downloads/documentation on Sophos site?
I can't seem to find anything on the Sophos site. I have several issues. I have ASG220 and ASG120 devices and I want to make sure I have the latest 8.306 iso download before letting Up2Date migrate me...
View ArticleUpgrading device breaks RED and SSL, and sometimes Webadmin
I have an ASG 220, about 3 years old with 1 GB RAM. I was offered a good deal to upgrade to a newer UTM 220 with 2 GB when I renewed support agreements. The current 220 has Site2Site connections to 3...
View ArticleSuspicious TCP state ?
How do you know if Suspicious TCP state are being reject or Drop I am seeing a lot the logs 09:48:58 Suspicious TCP state TCP 174.36.179.119 : 6005 ? 209.200.9.78 : 3584 [ACK SYN] len=40 ttl=105...
View ArticleAdditional Url Not being Block
I know this might be much to ask but can someone who is using the Web Filtering Additional Urls/ sites to block post a sample of their block list that they use to block ads that's working. Thanks UTM9...
View ArticleVlan and Cisco Switch
Hello all, Currently testing an Astaro UTM 220. We have got 99% of it up and running as we want it, the next, and final step is to configure Vlans for the internal, guest and voice networks. Eth0 is...
View ArticleACC Notification settings
Hello, In ACC notification settings, is there a way to tune the notification alerts? The problem I'm having is that when an appliance alerts us of a problem, it keeps sending us notification every...
View ArticleWebadmin and Webmail TCP Port confusion
Hello, With UTM 8.3 or 9 (with webadmin on port 443, reachable only from LAN) how to enable acces to UTM from WAN to my webmail on port 443. Logs said that Webadmin refused this connection when i want...
View ArticleAfter UptoDate from 8.003 to 8.306 webadmin login no longer possible
Hello, I found thebug in some from Up2Date patches. Ihaveinstalled brand new 8.003, then uploaded all patches and started the upgrade to latest version. later Icame to the browser, ASG shouws its...
View ArticleRemote SSL VPN to gain access to server on other side of Site to Site VPN
Trying to figure out how to get my SSL VPN users to gain access to a remote server on the other side of a site to site vpn. SSL VPN users ---> ASG F/W ---> inside network 10.242.2.0 xx.xx.xx.xx...
View ArticleCountry Blocking ?
Is the free for home use version of sophos / astaro have country blocking ? id like to use Sopho's instead of my sonicwall if it has free country blocking..
View ArticleClik here to view.
Who is my top talker in real time?
I have a 1.5Mb SDSL connection at my house that is getting soaked. How can I identify who my top talker is in real time? The aggregate bandwidth graphs are not much help in isolating who it is ......
View ArticleClik here to view.
Web filtering is not passing flash detection for starfall.com
So the whole reason why I am running a UTM is because I have setup a computer lab for my kids. Starfall's Learn to Read with phonics requires Adobe flash player to be installed for the website to work...
View ArticleAstaro SSO Active Directory Web Proxy
Hallo zusammen, wir betreiben unsere Astaro mit der Version 8. Der Web Proxy wird im Standardmodus betrieben mit der Authentifizierungsmethode AD SSO. In unserer Gesamtstruktur gibt es mehrere Domänen...
View Article