Odd issue with internet access

Hi Alex 

please post  the firewall rule and Nat rules with gateway failover condition set along with current DDOS settings?

Sure - this is the firewall rule:

NAT Rule:

DoS settings:

And my gateway details:

What are you pinging in your test?

Ian

8.8.8.8

Add a new NAT rule and keep it on top for tshoot.

Regards

Sure - I added the new rule and will wait until the issue happens again.

The issue occurred again, and my ping stopped working, the new rule didn't seem to have worked.

Hello there,

If the issue persists, please open a case with Support and share the Case ID with us.

I recommend you do a pcap when the issue isn’t happening and one when the issue is happening so support can compare both captures.

Additionally, do a GUI Packet Capture, showing what firewall rules are hitting the traffic (when it is working) and do the same when the traffic stops working.

And finally, do a conntrack during both scenarios.

But it does sound like an issue with ARP, so you might want to check the connection between your Moden and the Sophos Firewall

That should help support get started with the investigation.

Regards,

Emmanuel,

thanks for your response - I will follow those steps now.

Regards,
Alex

Emmanuel,

thanks for your response - I will follow those steps now.

Regards,
Alex

You can also check the log viewer if the gateway was down during a specific time

thanks Adam.

When the issue occurs, I can reach the firewall from the internet (sophos central), and so the issue really "only" is that my LAN can't access the internet (even with a firewall rule and NAT MASQ rule).

Is there something else I can/should configure?

Regards,
Alex

Create new test firewall rule from lan to wan keep on top of all firewall rules along with above suggested NAT rule for tshoot

I would suggest you upgrade to v20.0 GA and see if the issue still persists.

Ian