Sophos XG SNAT Rule for on prem Exchange

Question

Hi, i have a little situation here i don't know how to handle, hopefully someone can give me a hint. 
 
 Our ISP gave us two public accessible IPv4 adresses, x.x.x.6 and x.x.x.7, however our public gateway is x.x.x.5. Our WAN Interface in the Firewall looks like this: 
 
 Now we are NATing Port 443 to Port1:0 and inbound mail is perfectly fine. However, our Exchange sends Mail to the outside world using the IP-Addess x.x.x.5 - this leads to some mail systems bouncing our mails, because the expect the Exchange to be found at x.x.x.6 
 Our ISP told me to create a SNAT rule for the exchange but i can't figure out how to do that proberly, any help is highly appreciated.

148Points · Accepted Answer

I think i found what i am missing. I have to create an boject with my ip first and put this in the "Translated Source" field, not MASQ. This way it seems to work.

Raphael Alganes · Answer

Hello, 
 Kindly refer to the document guide for the setup: https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailSetupMTAModeWithMultipleWANPortsOrAliasIPAddresses/index.html 
 Hope this helps. Thank you for choosing Sophos. 
 Regards,

Sophos XG SNAT Rule for on prem Exchange

Top Replies