Transparently insert Sophos XG in a working network

Question

Hello, 
 I have a situation where my ISP installed a router and gave me a subnet ( 10.1.1.0/24 ) with the gateway being the router(10.1.1.1). 
 My understanding is that I need to configure an internal network (i.e 10.1.2.0/24) on the LAN side of the firewall, and on the WAN side on the firewall I should configure a route to the router (10.1.1.1) 
 That doesn't work for me because of some VoIP restriction. 
 Is there a way I can insert a firewall between the router and the devices, where the devices are on the same subnet of the router.

Raphael Alganes · Accepted Answer

Hello, 
 Thanks for reaching out to Sophos Community. 
 You may try to configure a bridge interface to connect to the router ISP and your existing LAN network 
 
 Next, Configure Bridge: 
 - Go to, Network > Interfaces. Click Add Interface and then click Add Bridge 
 -Then select designated interface connected to ISP router > then Zone to be configured - WAN 
 -Then select interface facing your existing network > then Zone to be configured - LAN 
 -Then configure IP and netmask of Bridge interface (I just assumed 10.1.1.2 you can specify your own or set DHCP > and Gateway: 10.1.1.1 (ISP Router) and lastly GW name: 
 Configuration would look like this:

Finally, configure a Firewall rule for LAN-> WAN Traffic and configure filtering (Web, APP, IPS, etc) as per your requirement. 
 Hope this helps and thank you for choosing Sophos.

Transparently insert Sophos XG in a working network

Top Replies