Check your Sophos firewalls are up to date – Sophos issued patches last week for a critical vulnerability in the software. The issue is with the Webadmin and Portal user interfaces.  Sophos fixes critical hijack flaw in firewall product • The Register