Sophos XG Firewall New Deployment - No Internet Access

Hi,

what rules and NAT do you have in place? What addresses do your interfaces show? Do you have a gateway included in your WAN interface?

Ian

wan and lan interfaces as below [please note i have unplugged wan atm], to get pfsense working to get internet;

firewall rules, have created a new one, right at the top; 

 and NAT rules are as below; [appears to be default nat rules]

Hi,

delete the linked Nat, you don’t need it at this stage. Next your any2any rule is a major security hole. Change it to lan zone  and lan network.

ian

Hi,

delete the linked Nat, you don’t need it at this stage. Next your any2any rule is a major security hole. Change it to lan zone  and lan network.

ian

any2any rule3, i put in temporarily  to see/trap the issue of no internet access. of the 3x nat rules, which to delete?

The two linked rules, they will be your potential access failure point.

Ian

I have disabled the nat rules, still the same.

I have reset to factory/re-installed from scratch as well, can't beleive it's this difficult to set it up, oobe..

Sounds like a more fundamental problem then. Are you sure your 1RU has Sophos-supported NICs? Are you sure the WAN port is in fact a WAN port? It could be anything from non-supported hardware to Sophos numbering your ports differently.

Likely it is not a Sophos Problem? 
You are using the same kind of IP Address. Check the Switch, if you actually get any kind of reply or if the Switch is confused due the duplicated IP. 

You can check the packet capture on the Sophos to check, if there are actually any kind of Internet Packets. 

when I deploy sophos, i have removed switch for now. I can see which ones are connected/plugged to which ones are accessible as lan. will update screenshots later on 2nite,

can we not changed the wan ports around? i can clearly see/identify which ports are lan/wan.

i shall try again and see if it makes a difference. although I am trying to install the xg firewall software.

https://www.sophos.com/en-us/free-tools/sophos-xg-firewall-home-edition

according to above, I didn't see anything about supported hardware.

Hi,

if you are using Sophos hardware with a software licence the ports are the ports are numbered usually in reverse order.

Ian

Motherbaord is; X11SSH-F  https://www.supermicro.com/en/products/motherboard/x11ssh-f

and has 2 onboard nics: