Configured WAN lP in Sophos XGS136, link is up but internet is not working

Configured one more WAN IP in the Sophos XGS136, link is up but traffic is not moving through new link, checked load balancing, everything is looking fine

Pervious link is working fine, however the new link is not working, able to ping 8.8.8.8 from the interface

please help on this issue

Added V20 TAG
[edited by: Erick Jan at 4:09 AM (GMT -7) on 17 Oct 2024]

Parents

0 Vivek Jagad 1 month ago

Hi Firewall Monitoring ,

Thank you for reaching out to the community, please refer - Sophos Firewall: How to Choose The Gateway For A Firewall Rule v19 - Recommended Reads - Sophos Firewall - Sophos Community

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to Vivek Jagad

Unable to open the link
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Which is the new line? Right now, SFOS will use TATA for everthing, as it is the "first available gateway".

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

TTSL is the new line, Can I change the priority here?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

You can reorder it in the SD-WAN Profile.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

update the SDWAN profile- but no change
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Are both gateways online in SFOS under Gateways?

Are you seeing traffic counter on the Sd_WAN rule itself? If not, it is not being applied.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

Yes Both gateways are online and I can see the traffic count on the SDWAN rule
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Then new connections should be routed to the new line.

How can you be sure, it is not being used?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 1 month ago in reply to LuCar Toni

Hi Firewall Monitoring ,

Can you perform the packet capture and share us the results here - https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Diagnostics/PacketCapture/index.html

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

I am unable to see the load on TTSL when i am checking the load under system graphs-WAN Zone_ gateway wise data transfer
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 1 month ago in reply to Firewall Monitoring

Can you create a separate firewall rule for that WAN link, with a single user/host and check if the traffic is generated and ensure the rule is created on the top. Try following the RR mentioned above !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Vivek Jagad 1 month ago in reply to Firewall Monitoring

Can you create a separate firewall rule for that WAN link, with a single user/host and check if the traffic is generated and ensure the rule is created on the top. Try following the RR mentioned above !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 Firewall Monitoring 1 month ago in reply to Vivek Jagad

Created the policy for single user and routed traffic through TTSL, No traffic count in the rule but user is accessing the internet through other link, attached SS of configuration, not sure how the traffic is moving with other link
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 1 month ago in reply to Firewall Monitoring

While pinging 8.8.8.8 from the source IP what do you observe in packet capture ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to Vivek Jagad

Traffic is moving through previous link only, port 2 is previous link, Port4 is new link and port 3 is LAN
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 1 month ago in reply to Firewall Monitoring

the rule id is 6 and NAT id is 1, can you confirm if the rule created is on the top ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to Vivek Jagad

Yes its on the top
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 1 month ago in reply to Firewall Monitoring

Do you have, by any chance, a static route for 0.0.0.0?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Firewall Monitoring 1 month ago in reply to LuCar Toni

No static route configured
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Mayur Makvana 1 month ago in reply to Firewall Monitoring

Hello Firewall Monitoring ,

I suggest raising the support case and share the case ID.

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel