Create a rule on xg 330 for internet traffic?

Jörg,

on your rule, did you enable the source rewrite?

Anyway share a screenshot of your Policy Rule.

Thanks

Hello, yes we have enabled

Rewrite source address(Masquerading)

Jörg

Hello,

is it possible to set the xg 330 factory default?

I think we have configured something wrong.

Jörg

Several screenshots of the rule.

Jörg,

can you enable the logging on this rule? Is your XG able to go on internet? Check a ping from it.

Of course resetting to factory default is possible but I think you are missing something.

Check your logs from System > Diagnostic > Log Viewer.

I have enabled the logging for this rule.

I don't prefer to reset the firewall to factory default but I have no idea what is wrong

What do you expect in the log Viewer.

Here are screenshots from the log viewer, al other are empty

It seems that XG was able to go on internet and updates.

If you ping www.google.com from XG, does it work? Ping can be reached from System > Diagnostic > Tools

What message do you receive when you try to surf on internet behind the xg?

When I ping www.google.com from the firewall, it works. But when I ping from a client behient the firewall it doesn't work. What must I configure that this also works?

In the inside network we have several clients and one server. The clients don't reach the internet.

At the server runs sophos enterprise console which don't get updates for the entpoint protection.

Thanks for help

Jörg

Jörg,

I have never seen the yellow triangle inside the policy rule next to Malware scanning and APP/WEB. All the packages are updated? Check them inside System > Administration > Updates.

Luk,

but I think the Malware scanning has nothing to do with the reachability of the internet.

About Sytem > Administration > Updates the xg told me that everything was successfully. Where can I see, if it was realy successfully?

In the configuration process of the xg firewall, the system creates also some rules. Where can I see these rules?

We have create port 5 for the dmz. Is this the problem? The ping from a client reached the firewall at the lan port (port 1) and try to find the internet at the dmz port (port 5).

Have we configure another rule for this way? I hope you know what I mean.

Jörg

Luk,

but I think the Malware scanning has nothing to do with the reachability of the internet.

About Sytem > Administration > Updates the xg told me that everything was successfully. Where can I see, if it was realy successfully?

In the configuration process of the xg firewall, the system creates also some rules. Where can I see these rules?

We have create port 5 for the dmz. Is this the problem? The ping from a client reached the firewall at the lan port (port 1) and try to find the internet at the dmz port (port 5).

Have we configure another rule for this way? I hope you know what I mean.

Jörg

Jörg,

Where does the port 5 belong to? DMZ or WAN zone?

Share your Zone and Ports config.

Luk,

Port 5 belongs to the dmz zone.

Uhm...both WAN and DMZ zone have default gateway configured on it?

Luk

I have deleted the dmz interface, now I have only the lan interface (port 1) with ip-address 192.168.22.254 and the wan interface (port 2) with the ip-address 192.168.17.250.

Must I configure a staic route for the internet traffic?

Thanks for help

Jörg

Static route is not needed.

Make sure WAN interface has default gateway.

Luk,

it was a realy simple wrong configuration. I had no idea what it could be at the firewall. We have a new DHCP and DNS Server in this network, and the dns wasn't correct configured. So we reached only ip-adresses inthe internet.

Thank you for the excellent suppport.

Jörg