This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cannot access Synology NAS with Sophos firewall on

I cannot access the data on my Synology NAS via windows explorer, when the Sophos Endpoint Security and Control (Version 10.6) firewall is turned on. Usually configuring the firewall using the interactive mode works out good for me, but here this doesnt seem to work out. I tried adding rules, but wasnt succesfull here. Once i disable the firewall i can access the NAS easily.

Could anyone help me out on this?



This thread was automatically locked due to age.
Parents
  • Hello M E,

    do you have other shares besides the Synology on your network and can you access them?
    Do you see the NAS under Network in Explorer or do you enter the UNC path (name or address?) in the address bar? Connections (whether blocked or allowed) should be logged (together with the Reason/Rule). Please note that the traffic (NetBIOS) is controlled by the LAN settings (see About the order in which rules are applied in the SESC Help) and not an application rule.

    Christian

Reply
  • Hello M E,

    do you have other shares besides the Synology on your network and can you access them?
    Do you see the NAS under Network in Explorer or do you enter the UNC path (name or address?) in the address bar? Connections (whether blocked or allowed) should be logged (together with the Reason/Rule). Please note that the traffic (NetBIOS) is controlled by the LAN settings (see About the order in which rules are applied in the SESC Help) and not an application rule.

    Christian

Children
  • Dear Christian,

    thanks for your answer. I have a network printer, which i can connect to. I see the NAS in the section "Andere Geräte" under Network in the Windows Explorer, when i klick on it there the Synology Web interface opens up. When i enter the path I get an error (error code 0x800004005). Once I deactivate the firewall i can reach the adress. I see blocked connections in the log, would it be helpful, if i posted it here?


    ME

  • Hello ME,

    the log could help. That you can "see" the NAS and its web interface suggests that not all communication is blocked but it looks like NetBIOS is.

    Christian

  • Dear Christian,

    the NAS has two IP-Adresses 192.168.0.107 and 192.168.0.106. I see the connections being blocked but am not sure how to fix that.

    Please note the attached log

    ME

    11:33:35    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:33:33    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:33:33    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:33:33    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:33:32    system    EIN ABGELEHNT     IGMP    192.168.0.1    0    Alle Aktivitäten sperren
    11:31:35    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:31:33    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:31:33    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:31:29    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:31:27    system    EIN ABGELEHNT     IGMP    192.168.0.1    0    Alle Aktivitäten sperren
    11:30:04    netbios    EIN ABGELEHNT     UDP    192.168.0.107    NETBIOS_DGM    NetBIOS-Verkehr sperren
    11:30:04    netbios    EIN ABGELEHNT     UDP    192.168.0.106    NETBIOS_DGM    NetBIOS-Verkehr sperren
    11:30:00    netbios    EIN ABGELEHNT     UDP    192.168.0.107    NETBIOS_NS    NetBIOS-Verkehr sperren
    11:29:29    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:29:26    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:29:23    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:29:22    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:29:22    system    EIN ABGELEHNT     IGMP    192.168.0.1    0    Alle Aktivitäten sperren
    11:27:26    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:27:25    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:27:24    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:27:18    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:27:17    system    EIN ABGELEHNT     IGMP    192.168.0.1    0    Alle Aktivitäten sperren
    11:25:20    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:25:19    system    EIN ABGELEHNT     IGMP    192.168.0.106    0    Alle Aktivitäten sperren
    11:25:17    system    EIN ABGELEHNT     IGMP    192.168.0.107    0    Alle Aktivitäten sperren
    11:25:12    system    EIN ABGELEHNT     IGMP    192.168.0.1    0    Alle Aktivitäten sperren
    11:24:59    netbios    EIN ABGELEHNT     UDP    192.168.0.107    NETBIOS_DGM    NetBIOS-Verkehr sperren
    11:24:59    netbios    EIN ABGELEHNT     UDP    192.168.0.106    NETBIOS_DGM    NetBIOS-Verkehr sperren
    11:24:55    netbios    EIN ABGELEHNT     UDP    192.168.0.107    NETBIOS_NS    NetBIOS-Verkehr sperren

  • Hello ME,

    thanks - what is the address of your PC?
    As said, NetBIOS should be configured using the LAN tab. On the General (does it read Allgemein?) tab, Primary -> Konfigurieren ...,  tab LAN. What is there right now? Adding the two addresses and selecting NetBIOS should do it.

    Christian

  • Dear Christian,

    now i got it, i was stuck in the windows netbios settings. Now i found the menu in the sophos firewall configuration. Connecting the NAS works just fine!

    Thanks a lot for your help!

    ME