How to access Sophos XG administration console when in Bridge Mode?

Question

Hi all, 
 This is my first post, so I hope it will work out. 
 So I wanted to put my Sophos XG home (running on UTM 110/120 hardware) into transparent bridge mode and I followed this instruction (in order to prevent dual NAT): 
 https://community.sophos.com/kb/en-us/122973 
 
 After succesfully changing the settings on sophos XG via the administration console 172.16.16.16, now the following questions arise: 
 
 how do I access the XG administration console when in transparent bridge mode? 
 i can not access the internet from the LAN side anymore, is the instruction not sufficient enough to do LAN-to-WAN traffic? 
 how does the XG get its pattern and/or firmware updates? 
 
 Hope you guys can help me out! 
 [8-|]

lferrara · Accepted Answer

M, 
 welcome to Sophos Community. 
 Make sure you can ping the IP address configured on XG bridge by an internal host. You can check the XG ip using Console options. 
 A LAN to WAN firewall rule is enough. Check firewall rules under Firewall menu and use log viewer to understand what is wrong. 
 Regards

AsadulHasan · Answer

Hello Kroos, 
 
 1. You should be able to access the GUI/Web Admin and SSH on the Bridge IP address. 
 2. Make sure you have proper LAN to WAN Firewall rule in place allowing the traffic from inside to outside. If you are still not able to access internet, start the packet capture for destination IP address and verify if the packets are getting forwarded by the Firewall or not under MONITOR & ANALYZE > Diagnostics > Packet Capture 
 3. XG Firewall keeps checking for Pattern Updates and Firmware upgrades every two hours by default. However these settings can also be modified under System > Backup & Firmware > Pattern Updates

MKR74 · Answer

thanks, it worked (after rebooting)! 
 
 i assume XG in transparent bridge mode gives an extra performance boost?

lferrara · Answer

MK474, 
 performance are the same. 
 Take note that some features are not available when XG is into bridge mode. 
 https://community.sophos.com/kb/en-us/123276 
 Regards