This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Doorbird connected to SOPHOS XG

We want to use a Doorbird (https://www.doorbird.com/de/) doorbell video station, connected to the SOPHOS XG via PoE.
We have created a firewall rule for the Doorbird's IP (Allow all Traffic, LAN to WAN).
Nevertheless, we do not receive any push notifications from the doorbell.
We only get a sound when the app is open on the iPhone, but also no push message.
The bell system is also not marked as online on the manufacturer's side (https://www.doorbird.com/checkonline).
As a test, we connected the system directly to the router via a PoE adapter.
Everything then works and the manufacturer also lists the system as online.
So something is still being blocked by the XG.
Does anyone have any ideas? We found a forum post here that deals with the same problem, but with a UTM (https://community.sophos.com/utm-firewall/f/german-forum/113368/doorbird/406180).

Thanks!

This thread was automatically locked due to age.

0 FormerMember over 3 years ago

Hi Edvvde,

Thank you for reaching out to the Community!

Did you configure web filtering on your firewall? If yes, it could be the web filtering causing this issue.

Try to create a new firewall for the Doorbird's IP address in the source network, and then don’t apply any advanced filtering on the firewall rule.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Edvvde over 3 years ago in reply to FormerMember

Hi thanks for your answer. No, there is no configured web filtering for the LAN to WAN rule
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to Edvvde

Hi Edvvde,

Thank you for the update.

Did you configure DoS protection for UDP?

I would suggest you run a packet capture on the source IP address and check if the source's traffic is allowed or dropped by the firewall.

Check out the following KBA for more info: Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Edvvde over 3 years ago in reply to FormerMember

Hi ,

No, DoS protection for UDP is not configured. We ran a packet capture on the source IP.

But it looks like that the manufacturer's server can be accessed via TCP.
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 3 years ago in reply to Edvvde

Hello There,

Take a look at this Community Post, you might need to create a custom SSL/TLS rule.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel