Change Internet Connection for the Firewall Upgrade

Hello,

Thank you for contacting Sophos community!

If you have multiple gateway configured on firewall with Active state. The firewall shall use any of the gateway for firewall generated traffic.

Also, we can specify the firewall generated traffic via specific gateway. However for that you need to enable routing from console.

console> set routing sd-wan-policy-route system-generate-traffic enable

console> set routing sd-wan-policy-route reply-packet enable

Later, you can define destination based SDWAN route and route it via specific gateway. You may use the below KBA for reference:

 Sophos Firewall: Using SD-WAN and XFRM to route System Generated Traffic like CFR to another location 

In destination, you can specify the FQDN mentioned in KBA for the Sophos updates:

docs.sophos.com/.../index.html