Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 38 subscribers
  • Views 543 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG : Zone suddenly not detected and major traffic dropped

Sophos User3113

Hello,

for unknown reason since yesterday 1,the traffic of the vpn is dropped. 

The top down rules : 

What can explain the lost of the source zone information? In this case, the traffic cannot use a specific rule with specfic zone... :(

Thank you !



This thread was automatically locked due to age.
  • 0

    I think a lot of information is missing:

    a) Whats your VPN source IPs/Networks? Are we talking about SSL VPN? IPSEC?

    b) What "zone information" lost means? The firewall didn't treat the packets with source zone information? The log viewer shows no information about zone?

    c) Why do you have a "Deny all" all zones/src/destination? Normally if a packet has no matching rule, it will be dropped by the firewall. Having that rule by hand will cause problems with the internal XG working state.

    Anyway, more information would be appreciated to help you out.

    Bye!

Unfiltered HTML