Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update. Please follow knowledge base article 133945
Learn about the Benefits of Multi-Factor Authentication (MFA). Turn your MFA on now!
We'd love to hear about it! Click here to go to the product suggestion community
I configured a Sophos XG with WLAN (Bridge2LAN Config).
So my mobile device is in the same LAN/Subnet as the printer is (yes: Airprint is enabled on it).
I simply start my browser on the mobile device and connect to the printers website. So connectivity with tcp is fine.
But airprint is not possible.
Any ideas? Should this be possible in general?
Thanks for hints!
Bridge to AP LAN should work with Airprint. This is my understanding of this feature (Bonjour). AP should not drop those multicast / Broadcast packets.
You should start to debug this on AP Level, which most likely requires Sophos Support.
In reply to LuCar Toni:
Do I need this feature???
In reply to GernotMeyer:
I believe the feature you're looking for is accessible on the specific wireless network configuration under Wireless Networks. As per this KB, client traffic should be set to Bridge to AP LAN'. The bridge to ethernet feature is a tad different as it will bridge all access point traffic to LAN.
In reply to TimHansen:
OK. Thanks for Info.
The WLAN is already bridge2LAN but Airprint doesn't work.
So we have 5 IOS devices and 3 airprint printer.
But no IOS device is able to connect to any printer.
What can cause the problem?
Can you show us the whole configuration?
FW Rule: It's simply LAN2LAN (any to any).
Can you replace in the FW Rule the network hosts with "Any"? Those with the black lines.
But it is not understandable!
There was no (dropped) ticket visible.
Sure it is.
Because Airprint (Bonjour) uses Broadcast / Multicast to find the printer.
So your Firewallrule, which (could be) 192.168.0.0 to 192.168.0.0 will not match.
The traffic is 192.168.0.1 to 188.8.131.52 for example.
XG does not log dropped traffic, which has no matching rule. https://community.sophos.com/kb/en-us/133310
OK. Understood. Thanks for help!!!