
Sophos UTM 9.6 WebAdmin - search in lists
Sophos
The filter field can be used to quickly reduce the number of items displayed in a list. This makes it much easier to find the items you are looking for.
Interesting facts
- During a search, several fields are normally searched for the search expression. For example, a search in Users & Groups considers username, real name, comment and first email address. Generally speaking, the search takes into account all the text you can see in the list, except for those details that are displayed after clicking on the info icon.
-
The list search is case-insensitive. This means that it makes no difference whether you enter upper or lower case letters. The search result will show matches with both upper and lower case letters. You cannot explicitly search for upper or lower case letters.
- The list search is based on Perl-compatible regular expressions (except for case sensitivity). Typical search expressions known from text editors such as * and ? (as simple placeholders) as well as the operands AND and OR do not work in the list search.
Examples
The following list is a small selection of useful search expressions:
Simple expression: Finds all words that contain the specified expression. For example, "inter" finds the results "internet", "interface" and "printer".
Word beginning: Prefix the search expression with the string \b. For example, \binter finds the results "internet" and "interface", but not "printer".
End of word: Add the string \b to the end of the search expression. For example, http\b finds the result "http", but not "https".
Beginning of an entry: Prefix the search expression with the character ^. For example, ^inter finds the result "Internet Uplink", but not "Uplink Interfaces".
IP addresses: When searching for IP addresses, you must mask the separators with a backslash (backslash). For example, to search for 192\.168, you must enter "192.168". For a more general search for IP addresses, use \d as a wildcard for any digit. \d+ finds several consecutive digits. For example, \d+\ . \d+\.\d+\.\d+ will find any IPv4 address.
Note - It makes more sense to use a simpler, safer search expression that will lead to more results than to rack your brains for the perfect search expression, which is then more likely to lead to unexpected results or wrong conclusions.
For a detailed description of regular expressions and their use in Sophos UTM, see the Sophos-Knowledgebase.

Marcel Zimmer is the Technical Managing Director of EnBITCon. During his time in the German Armed Forces, the trained IT developer was able to gain numerous project experiences. His interest in IT security was significantly awakened by his service in command support. Even after his service, he is an active reservist in the Bundeswehr.
His first firewall was a Sophos UTM 120, which he had to set up for a customer project. Since then, his interest in IT security has grown steadily. In the course of time, various security and infrastructure topics have come into his focus. His most interesting projects included, for example, WLAN coverage in an explosion-proof area, as well as a multi-site WLAN solution for a large