This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trouble with Firewalla device

I have added a Firewalla device to my network so that I can control device access (shutting off established connections for example). I am trying to troubleshoot something in the device that isnt working (a block against a group didnt work, but should have). So they asked me to enable Remote Support on the device. This is failing. They think the XG is blocking something. So I looked through the logs in the GUI but i dont see anything super interesting other than 

IPS
2021-09-15 11:44:59
Signatures
Drop
Firewalla IP
34.212.180.91
3696
SERVER-OTHER Veritas Backup Agent DoS attempt
server-other
Windows
Server
5
07002

I tried creating a DOS exemption for the internal IP but the traffic keeps showing up. But that is happening regardless of whether or not I try to enable remote support.

I also see a corresponding Invalid Traffic item in the firewall log.

Any other thoughts on how I can troubleshoot this access issue?



This thread was automatically locked due to age.
Parents
  • Hello there,

    Thank you for contacting the Sophos Community.

    What version of the XG are you running?

    I'd recommend you to create a Firewall rule for one of the computers in use without any restriction see if it works (No Webfilter, Decrypt and Scan, IPS, etc)

    If you’re using V18 also create a SSL/TLS rule exception for this computer.

    Do you know what Remote Support software is being used? 

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Reply
  • Hello there,

    Thank you for contacting the Sophos Community.

    What version of the XG are you running?

    I'd recommend you to create a Firewall rule for one of the computers in use without any restriction see if it works (No Webfilter, Decrypt and Scan, IPS, etc)

    If you’re using V18 also create a SSL/TLS rule exception for this computer.

    Do you know what Remote Support software is being used? 

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Children