Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
hi all,
got a DNAT like below, blanked the fields out due to privacy
do i need to change my inbound interface and outbound interface to the correct ISP as i have two ISPs, so it could be going out wrong ISP, or will it pick the right ISP to go out of from the original destination as that is the public ip and obviously that is attached to one of the ISPs?
thanks,
rob
Hello Sophos User1175 ,
Thank you for reaching out to the community, I'd recommend the following:
| Inbound interface | Select the interfaces through which traffic specified in this rule enters Sophos Firewall. For destination NAT, you can specify Any. For VPNs, set this interface to Any, since VPNs are not interfaces. |
| External source networks and devices | Select the source networks and devices from which users can access the internal server. To automatically create a loopback rule for internal users to access the server, select Any. |
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Hello Sophos User1175 ,
Thank you for reaching out to the community, I'd recommend the following:
| Inbound interface | Select the interfaces through which traffic specified in this rule enters Sophos Firewall. For destination NAT, you can specify Any. For VPNs, set this interface to Any, since VPNs are not interfaces. |
| External source networks and devices | Select the source networks and devices from which users can access the internal server. To automatically create a loopback rule for internal users to access the server, select Any. |
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
