Cant access internet through a browser on my separate zone wifi network with APX320 through my RED 060 (works fine inside the XGS320)

Question

Hello. 
 
 I have created 1 wifi network bridge to lan and 3 wifi networks on separate zone. 
 All wifi networks operate just fine for as long as my APX320 are connected on the LAN of the XGS2300. 
 
 On my RED 60 i can access the internet through my bridged to lan wifi network but not through my other separate zone wifi networks. 
 I went through rules and policies in order to enable as follows but it doesnt work :

Would you give me an hint on why it is not working ? 
 
 Wireless protection is enabled. 
 DHCP and DNS dont seem to be the problem since the connections work while connected to the XGS. 
 I am missing something related to the RED. 
 
 Also, i can ping google name or 8.8.8.8 but cant access through an browser 
 
 Best regards, 
 JF

Vivek Jagad · Answer

Here is the difference for your understanding between Standard/Unified mode and Standard/Split mode: 
 Standard/Unified mode 
 This is the most commonly used mode. In this mode, we expect that the remote network will be fully managed by the UTM, through the RED. DHCP may be offered for the remote LAN by the UTM, and the RED may be the only device connecting the LAN to the Internet. While another router may sit in front of the RED, there is not a parallel path around the RED to the internet. Figure 2: RED used in Standard/Unified mode Figure 2 illustrates the flow of data in this operational mode. All traffic from the remote LAN will pass through the RED tunnel, whether it is heading for the local LAN, or the Internet. This allows the UTM to allow or deny requests in exactly the same manner as it does for traffic coming from the local LAN. Traffic between local and remote LANs can be blocked or allowed just by using firewall rules on the UTM. Web traffic can be filtered using the web security module, and applications such as Skype or BitTorrent can be controlled for remote LAN users, just as they can be for LAN users. This provides the highest level of security and manageability for remote networks. Its biggest drawback is the increased bandwidth requirements it may place on the UTM&rsquo;s internet link. Since all internet traffic from the remote LAN also uses internet bandwidth at the UTM, the internet bandwidth at the UTM must be large enough to service requests from both its own local users, and all remote RED users. The RED 10 appliance is capable of tunneling data at up to 30 Mbps. In the event that the RED loses contact with the UTM, and the tunnel fails, the RED will fail closed. Remote LAN users will lose access to the internet as well as to the UTM LANs until the tunnel can reconnect. 
 Standard/Split mode 
 Standard/Split mode is physically similar to Standard/Unified mode. We expect that the remote network may be managed by the UTM, and UTM may provide DHCP to the remote LAN. Also, the RED is most likely the only device between the LAN and the internet. However, only traffic for selected networks is sent through the tunnel. All other traffic is sent directly out the local internet connection. The RED will masquerade outbound traffic to come from its public IP address. This minimizes bandwidth usage over the tunnel, and lightens the bandwidth requirements on the UTM, but it also reduces the manageability of the remote network substantially. Traffic to or from the internet cannot be filtered or protected from threats. Security can only be applied between the remote and local LANs. Figure 3: RED used in Standard/Split mode In the event that the RED loses contact with the UTM, and the tunnel fails, the RED will fail closed. Remote LAN users will lose access to the internet as well as to the UTM LANs until the tunnel can reconnect. For the reference you can refer the technical training guide - Sophos UTM: RED (Remote Ethernet Device) technical training guide

Cant access internet through a browser on my separate zone wifi network with APX320 through my RED 060 (works fine inside the XGS320)

Top Replies