Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Issue with my Firewall Policies

Hi to All SOPHOS Specialist!

I have a weird situation with my Firewall Policies and I need your help. I created one policy to allow selected users to access facebook, youtube and linkedin, the problem is when I tried to test using policy checker it is showing that he's blocked. Below is the screenshot of my firewall Policy. This device is a  newly purchased Sophos XG86.

 

 

 

I hope anyone can shed a light on this weird situation.

 

Thanks

 

Rodney



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Rodney Altamera,

    The screenshot you provided shows web policy Allow All which means it will allow access to those websites, unless you have a default firewall rule on top of this rule in screenshot. Please make sure to move this rule on top and check.

    Thanks. 

  • Hi H_Patel,

     

    I found the problem. At the bottom Source Zone option you need to select the VLAN ID. If you do not select and leave it at automatic then it will not work. The IP address 192.168.100.43 is allowed to view facebook.

     

    The only weird thing in my main firewall in our main office Sophos XG310 if automatic is selected it will be able to detect. The Sophos having issue is my remote site sophos xg86.

     

    Thanks

     

    rodney

Reply
  • Hi H_Patel,

     

    I found the problem. At the bottom Source Zone option you need to select the VLAN ID. If you do not select and leave it at automatic then it will not work. The IP address 192.168.100.43 is allowed to view facebook.

     

    The only weird thing in my main firewall in our main office Sophos XG310 if automatic is selected it will be able to detect. The Sophos having issue is my remote site sophos xg86.

     

    Thanks

     

    rodney

Children