Configured WAN lP in Sophos XGS136, link is up but internet is not working

Configured one more WAN IP in the Sophos XGS136, link is up but traffic is not moving through new link, checked load balancing, everything is looking fine

Pervious link is working fine, however the new link is not working, able to ping 8.8.8.8 from the interface

please help on this issue

Added V20 TAG
[edited by: Erick Jan at 4:09 AM (GMT -7) on 17 Oct 2024]

Parents

0 Vivek Jagad 1 month ago

Hi Firewall Monitoring ,

Thank you for reaching out to the community, please refer - Sophos Firewall: How to Choose The Gateway For A Firewall Rule v19 - Recommended Reads - Sophos Firewall - Sophos Community

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to Vivek Jagad

Unable to open the link
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Can you show us screenshots of your config?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Which is the new line? Right now, SFOS will use TATA for everthing, as it is the "first available gateway".

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

TTSL is the new line, Can I change the priority here?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

You can reorder it in the SD-WAN Profile.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

update the SDWAN profile- but no change
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Are both gateways online in SFOS under Gateways?

Are you seeing traffic counter on the Sd_WAN rule itself? If not, it is not being applied.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

Yes Both gateways are online and I can see the traffic count on the SDWAN rule
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Then new connections should be routed to the new line.

How can you be sure, it is not being used?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 1 month ago in reply to LuCar Toni

Hi Firewall Monitoring ,

Can you perform the packet capture and share us the results here - https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Diagnostics/PacketCapture/index.html

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Vivek Jagad 1 month ago in reply to LuCar Toni

Hi Firewall Monitoring ,

Can you perform the packet capture and share us the results here - https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Diagnostics/PacketCapture/index.html

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data