Cannot ping 8.8.8.8 from Sophos and also traffic not hitting Firewall rule after creating LAN to WAN.

Hi, you don’t seem to have a wan interface? Also all your links are running in half duplex and 10mbs.

port a is a lan port not the wan port. 
ian

Hi, you don’t seem to have a wan interface? Also all your links are running in half duplex and 10mbs.

port a is a lan port not the wan port. 
ian

'Hello,

Thanks for the response. I have the Port B (WAN) with 10.10. subnet which is my internet connection. Also when I try to change from GUI, it is showing Auto-Negotiate and it is faded out. Please find the screenshots for both. Please let me know what changes I have to make. Your reply will be greatly appreciated. 

What are they connected to that you only get half duplex and 10mbs?

what is your Nat rule?
ian

Hello Ian,

Thanks for the Quick response. I have installed Sophos XG in my VMware. I am accessing the firewall through Port A address and for Port B, I have assigned the IP subnet with my Internet connection address. I have kept MASQ in NAT Rule. 

My Wifi is currently in 10.10. subnet. 

There is no physical firewall. I have installed Sophos in VMware. 

Kindly let me know what changes to make. Your help will be greatly appreciated. 

Is this a virtual appliance? 
You have 10 mbit/s half duplex, indicating a software bug with the adapters. 

Would recommend to change the adapters: https://community.sophos.com/sophos-xg-firewall/f/discussions/120721/interfaces-set-to-10-mbps-half-duplex-after-upgrade-from-17-5-to-18-0-on-vmware

Hello,

Thanks for providing the link. I have installed Sophos in Virtual Machine where both are running in trial version.

When I follow the steps to add Network Adapter(E1000), I cannot find the E1000 type in the list. I am changing it from "Custom" but could not find the E1000 type. 

Is there any other method where I can change the speed and Duplex settings ?? Your help will be greatly appreciated. It is little urgent. 

Depending on the Vmware version. Check the Docs of your Hypervisor version, how to change the NICs. 

Hello,

I tried changing the speed and duplex from console. When I enter the command - 

Set network interface-speed PortA 1000fd 

but for some reason, 1000fd is not being accepted. Also in the GUI, when I try to change the speed/duplex, The option is faded out and I am not able to change it.  Your help be greatly appreciated. 

You need to change the network adapter in the hypervisor. 

Ok, Just one last question, After changing the speed and Duplex to 1000/Full. Will I be able to ping the internet and get the FW rules active ?

I just wanted to know, If this is the only thing which is blocking ping to internet, I will change it or is there anything else to check apart from that ?

To have a half duplex 10 mbit/s connection can cause all sorts of issues. Likely it will resolve your problem.