RED Modes

Question

Hi, 
 I read about all red modes but could not find a way to let the network behind RED Devices use the internet from their local internet gateway but take the web filter policy from the Firewall. Is it possible? 
 Thanks.

PhilippRusch · Answer

Hello, 
 just think about this for a moment or two: 
 The webfilter is running on the firewall in your HQ. It controls how the traffic is handled which goes THROUGH this central firewall system. Then you want your branch offices NOT TO USE this internet uplink BUT instead using their own, local uplink. So how could this work? 
 I am trying to be honest, hopefully not to harsh: This is simply a misunderstanding / misconception. 
 So if a central firewall doesn't fit to your needs here, you colud solve this with Sophos Intercept X clients running on the clients in your branch offices. This is centrally managed as well (from "Sophos Central") and allows you to block YouTube and other things. 
 Hope this helps.

dirkkotte · Answer

No, unfortunately not. With local internet breakout, the traffic never touches the firewall. Therefore, firewall policies or filters can not be used.

Mayur Makvana · Answer

Hello, 
 Unfortunately, this is not feasible. You may use the unified mode wherein Remote and Internet traffic routes via Sophos Firewall and you can apply filtering as required. 
 Further you may refer the description of the RED modes. 
 docs.sophos.com/.../index.html

rfcat_vk · Answer

Hi, 
 you might need to investigate using xgs87 or similar small size FWs. 
 Ian

Mayur Makvana · Answer

Hello, 
 We understand your concern, but the RED is not meant for that. You can use Sophos lower models on branch offices to achieve this.

RED Modes

Top Replies