Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

port forwarded packets getting denied

I have a pfSense box between sophos XG firewall and the internet because I wanted to use a VPN to have all traffic going through, I have the port forwarded in pfSense to the XG firewall however the XG firewall is denying the packet, which I didn't even know was reaching the firewall until I enabled the log in settings by sheer coincidence.

 

messageid="02002" log_type="Firewall" log_component="Appliance Access" log_subtype="Denied" status="Deny" con_duration="0" fw_rule_id="0" policy_type="0" user="" user_group="" web_policy_id="0" ips_policy_id="0" appfilter_policy_id="0" app_name="" app_risk="0" app_technology="" app_category="" in_interface="Port3" out_interface="" src_mac="00:50:56:b9:fb:3c" src_ip="198.199.98.246" src_country="" dst_ip="10.6.2.1" dst_country="" protocol="TCP" src_port="49209" dst_port="25810" packets_sent="0" packets_received="0" bytes_sent="0" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="" src_zone="" dst_zone_type="" dst_zone="" con_direction="" con_id="" virt_con_id="" hb_status="No Heartbeat" message="" appresolvedby="Signature" app_is_cloud="0"

 

I've tried multiple ports but they are getting denied with similar messages before even getting to the firewall rule to allow them.



This thread was automatically locked due to age.
Parents Reply Children
  • Okay I looked at the rule that I had made first which I have disabled under the one I have in the picture. I had the source wrong which is why it wasn't working before and now it is working, thank you. However why were the packets being denied for "appliance access" anyway?