Change Internet Connection for the Firewall Upgrade

Question

Hi, 
 Does the firewall use only the first WAN connection for operations like upgrading the firmware, definitions, or load balances in case of multiple WAN interfaces? If it uses only the first wan interface, is it possible to change it? 
 Thanks.

Mayur Makvana · Answer

Hello, 
 Thank you for contacting Sophos community! 
 If you have multiple gateway configured on firewall with Active state. The firewall shall use any of the gateway for firewall generated traffic. 
 Also, we can specify the firewall generated traffic via specific gateway. However for that you need to enable routing from console. 
 console> set routing sd-wan-policy-route system-generate-traffic enable 
 console> set routing sd-wan-policy-route reply-packet enable 
 Later, you can define destination based SDWAN route and route it via specific gateway. You may use the below KBA for reference: 
 Sophos Firewall: Using SD-WAN and XFRM to route System Generated Traffic like CFR to another location 
 In destination, you can specify the FQDN mentioned in KBA for the Sophos updates: 
 docs.sophos.com/.../index.html

Change Internet Connection for the Firewall Upgrade

Top Replies