Create a vlan (AP SSID), when connected by devices, seemingly behave as it isn't behind Sophos firewall, get's public IP

Question

Is there a way to create a vlan allow connected devices (via AP) bypass firewall? 
 My current SSID in Vlan has a different IP subnet from my home devices. There are times I want to connect devices that totally bypass home firewall. This setup doesn't work. Is there a way to do this?

Matthew Ritchie · Answer

Step 1You can create a LAN2WAN Firewall rule that matches the device, vlan/subnet you are targeting and just dont enable any of the policies on it, no web, app, ips, etc. 
 Step 2 (Optional if IP available) If you have a "spare" Public IP Address that you can split off and assign (as an alias interface on your WAN), you could NAT that IP completely to the wireless endpoints IP address, so any traffic to "PUBLICIPXX" is NAT'd to "WIRELESSENDPOINT1". 
 But if you just want to bypass firewall security, follow step 1. If this doesnt achieve what you want, let me know

Create a vlan (AP SSID), when connected by devices, seemingly behave as it isn't behind Sophos firewall, get's public IP

Top Replies