Synology NAS

Question

Greetings, 
 I guess it's a simple and common asked issue, but unfortunatelly the search function seems to be disabled/malfunctioning right now - despite trying different keywords. And some (video) guides that I found show some setups on old versions that contain completly different forms / fields. 
 I have a 
 
 Fritz!Box [X.X.4.1] 
 Sophos XG (18.0.4)
 
 [X.X.4.2] WAN 
 [X.X.5.2] LAN

Synology NAS with [X.X.5.123] 
 
 Without the Sophos XG I would've set up an easy port-forwarding rule in the Fritz!Box to access the NAS. Now with the firewall in between them, I am utterly lost 2bh. My goal is to access some ports/services from outside. My UniFi Network controller for example which runs in a docker container on the NAS and is accessable at port 8443 while on LAN. 
 Is there a step by step solution of what has to be done / forwarded and especially: How? Please consider that I'm completly new not only to Sophos but to Firewalls in general. 
 Thx in advance for your help.

apijnappels · Accepted Answer

In Fritzbox under Internet -> Permit Access configure your XG-firewall as Exposed Host, that way all traffic will be delivered at Sophos (that is step 1 to make sure traffic reaches Sophos' WAN interface). 
 Then in XG you can create DNAT rules Protect -> Rules and policies -> Add firewall rule -> Server access assistant DNAT 
 From there an assistant will guide you through opening ports to the respective internal devices. 
 You should first create your "services" under System -> Hosts & Services -> Services (otherwise they won't be available from the assistant in step 3). 
 I think you should be able to get it going with this. If not, than ask again explaining where you need help.

Synology NAS

Top Replies