Sophos Sophos Firewall (email alerts and reports): OAuth 2.0 and Microsoft 365 SMTP AUTH

Status: OAuth available

Supported. For most installations this is a configuration change rather than a migration, and no relay is needed.

What the vendor says

Sophos publishes an official guide ‘Configure OAuth 2.0 on Microsoft 365’ for Sophos Firewall 22.0: register the firewall as an app in Microsoft Entra, add delegated SMTP.Send + offline_access permissions, turn on Authenticated SMTP for the sending user, and configure notifications with client ID / secret / refresh token. Confirms Modern (OAuth 2.0) SMTP AUTH support; availability depends on the firewall version.

Read the vendor’s statement in full
Everything on this page comes from that document. If it and this page disagree, the vendor is right and this page is out of date — say so.

Models named in the advisory

  • Sophos Firewall 22.0
  • Sophos Firewall 20.0

A model missing from this list is not automatically safe. Vendors publish headline lists; regional variants and OEM rebadges drift away from them.

What to do

Follow the vendor’s instructions above. Come back here only if the device turns out to be on an older firmware branch than the one the document assumes.

Sophos entry contributed by @TrueFurina in #310.

Last reviewed 2026-08-27. Source: data/devices.json.

Updated 27 Aug 2026

mx.msgwing.com587 STARTTLS · 465 SSL/TLS Register free