Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Port forward - Sophos XG 210 - firmware SFOS 16.01.2

 Hi all, I need to forward one TCP port (580) to one server in my DMZ (server A). I have a XG210 with /29 in WAN link:

I configure new business application with type DNAT/Full NAT

I flag the "Rewrite source address (Masquerading)"  and "Create Reflexive Rule", it's correct ?

I need to create another network rule for NAT all outbound traffic of my server A with public IP (1.1.1.2) ?

 

Thank's Sascha



This thread was automatically locked due to age.
Parents Reply
  • Hi lferrara, thank's for reply :)

    I remove the flag on "Create Reflexive Rule", but I need to create another network rule for NAT all outbound traffic of my server A with public IP (1.1.1.2) ?

    The server A can generate traffic to port 580 and I want the new connection to another server on internet have a source ip 1.1.1.2

     

    ps- when I check "Create Reflexive Rule" ?

     

    Thank's Sascha

Children