Configuring Sophos XG136 Firewall port for connecting switches.

Hi EDP AFRO,

Thank you for reaching out to Sophos Community.

What are you referring to North End and south end of the firewall?

It would be great if you can share a rough diagram of your network environment.

Hi EDP AFRO,

Thank you for reaching out to Sophos Community.

What are you referring to North End and south end of the firewall?

It would be great if you can share a rough diagram of your network environment.

Hi EDP AFRO,

EDP AFRO said:

Servers IP addresses are 157.61.3.0/24 whereas Switches have 157.61.10.0/24 as their Managemen IP.s.

You can configure a physical interface with 157.61.10.0/24 subnet and then configure routing on Sophos Firewall to connect to server network 157.61.3.0/24. Assuming this interface is kept in the DMZ zone.

EDP AFRO said:

Users are devided into 4 VLANs. 157.61.2.0/24, 157.61.4.0/24, 157.61.5.0/24, 157.61.6.0/24 respectively 

For users, you can configure VLAN interface(all are in LAN zone) on Sophos Firewall with required VLANs.

Sophos Firewall: Configure Virtual LAN

After that create a LAN to DMZ & DMZ to LAN firewall rules to allow communication between servers and users.

You may also reach out to Sophos Professional Services to help you to deploy and securely configure Sophos products with organization's security requirements and Sophos best practices.

Thanks sir, for your prompt reply. I have already configured VLAN on incoming connection from L3 switch. Shall I configure LAG on all the connections of L2 switches at Sophos with IP 157.61.10.0/24. Kindly advice.

Hi EDP AFRO,

Yes, you can configure LAG for L2 switches with 157.61.10.0/24 subnet.