XG125 Blocking Programs or Ports

Hi,

Is it possible that an XG125 Firewall can block programs and TCP/UDP ports for network traffic between a Windows Server and client computers within the same LAN?  I know the firewall can block traffic between the LAN and the internet but my question is specific to traffic within the LAN.

The client has a single domain server running Windows 2019 Essentials connected to a single network address LAN with client computers which are domain members.  Additionally, the client uses Sophos Central with InterceptX as their endpoint protection.

Domain logins, user rights, and file, folder, & printer sharing, are working properly but other services such as Windows Server Updates Services and access to a SQL 2019 Express database are not.  I have used Port Query to test the server LAN IP address to check if the expected ports are available but they do not respond when queried from any of the client computers.  I have checked the domain group policies, local policies, the Windows Firewalls on the server and the clients, and everything seems to be setup correctly.  If I query the ports on the server they respond so I know the services are listening.  The relevant ports 8530, 8531, 1433, 1434 have all been added to the respective firewalls for both TCP and UDP.

Having found these network problems with different programs and services I am now considering the possibility that the Sophos XG125 is blocking traffic between the server and clients within the LAN.

I would appreciate insights from anyone with experience of this happening, any suggestions I could try, or to rule out that the XG125 cannot interfere with traffic between computers within the LAN.

Many thanks in advance.

Brian