WAN service ACLs

Question

I have my service ACLs ticked as follows, but I seem to be having issues with the WAN ones. 
 
 Even though I have ping/ping6 and SSL VPN ticked for the WAN zone, I am unable to ping the public IP of my WAN interface, or connect using the Sophos VPN client so I'm missing something. 
 
 Firewall rules are currently pretty minimal, mostly stock + VPN policy. 
 
 Anywhere else I should be looking?

Vishal_R · Answer

Hi JJM : Is your WAN ISP static IP directly configured on XG Interface? If Yes, are you able to receive the PING packets to XG over the ISP network for the Public IP from which you are generating PING? (You may validate the same with the help of the TCPDUMP command).

If No, then is the required port forwarding done on the next device or router to forward the request on XG for ICMP and SSL VPN service ports/protocols?

WAN service ACLs

Top Replies