Sophos XGS 6500 Notification Emails not working

Hi Josh,

Thank you for reaching out to Sophos Community.

Have you tried to use the following KBs?

•  Sophos Firewall: Troubleshooting Guide - Email Notification not working 
• Sophos Firewall: Not receiving report notifications

What we discovered, was that the notification emails send from the LAN port IP address if you are using an internal mail server inside your network.  If you switch it over to using the internal XGS mail server, it uses one of your WAN ports to do the sending.  Additionally, a trick Sophos support showed me was that even without the Sophos XGS "Email Protection" license, you can still use the "Email > Mail spool" and "Email > Mail logs" pages to view errors in sending.  Specifically the Mail spool page had a wealth of knowledge as to why a message would fail to send to an internal mail server. 

We had assumed it wouldn't work since we didn't subscribe to the "Email Protection" license.  

SNAT system generated traffic from the XGS itself to the mailserver. Especially if the mailserver is in a network, not routed by the XGS like a core router or other firewall.

console> set advanced-firewall sys-traffic-nat add destination yourmailserverIP snatip firewallinterfaceIP

like:

console> set advanced-firewall sys-traffic-nat add destination 192.168.2.100 snatip 192.168.1.1