Firewall in front of Router ?

Hi,

what functions do you use on the router? The XG will quite happily function in front  of the router. You would need to put the router in bridge mode to avoid double NAT or you could put the XG in bridge mode, though for a beginner that adds complexity to your network.

Ian

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/137737/sophos-firewall-home

Hi,

what functions do you use on the router? The XG will quite happily function in front  of the router. You would need to put the router in bridge mode to avoid double NAT or you could put the XG in bridge mode, though for a beginner that adds complexity to your network.

Ian

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/137737/sophos-firewall-home

Thanks Ian. Look, I am total and utter newbie on firewalls, routers etc but have been on internet since 1997/8.  What I want to ensure is that I

have proper full logs of which url's are being visited from clients on the network. Quic I know throws a spanner in works. but find even that has sparse info on the url visited, only like "youtube.com" but could be anything.  I have tried and I think may have blocked Quic using Port 443 tcp and udrp and port 80 Udrp ?. Is that correct as understand quic makes logging harder ?.

The website is very slow at my end this morning.

To block QUIC you need to block ports 80 and 443 UDP. not TCP otherwise you will block most web traffic.

The XG has many reports, but depends on how you setup your firewall rules.

The XG comes in two basic forms, Sophos hardware or your own software, but before going down software path definitely read the link I posted previously.

The forums will provide help and guidance when you run not issues.

Ian

Hi,

I would suggest you delete your other post because you are not using Sophos software yet.

ian

Thanks. So Port 443 TCP and UDP   and Port 80 UDP only ?. Is that correct ?

Cheers

QUIC by definition is 443 UDP. You block TCP 443 and you will bock internet access.

Ian