Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Problem with aliases on LAN interface

    Hello, i have a problem on a customers site. The customer switched from Sophos UTM to XG firewall. In the past the customer ran into the problem that his network got to small. Because of ease they just add 2 additinal adresses on the LAN interface…
  • ARP Packets

    Hi, On October 31, 2022 Windstream pushed a software update to our VeloCloud device that caused our Internet to go down every 20 minutes. The problem was isolate to ARP packets that are sent from our Sophos XG firewall to the VeloCloud device. At firewall…
  • Disable interface with an API call

    Hi @all, I'd like to disable a hardware interface with an API call, in this case I weant the WAN-interface to be disabled. Is this possible? I already managed to disable an VPN-Tunnel with this command: my-ip:port/.../APIController Account</Username…
  • VLAN/DMZ interface IP as DNS Server

    Hi, I've set up a new VLAN (20) bound to the LAN hardware (Port1.20) with IP 192.168.20.1, and assigned it to the DMZ zone. If I run the policy checker using Firewall,SSL/TLS and web method, with the following parameters, it fails URL: dns://192.168…
  • Netfwork interface stoped working

    Hi team! My WAN interface was stoped working, just give me information of not available. Other interfaces woring well
  • GRE tunnel on Bridge-pair ?

    Why is not possible to create GRE tunnel on bridge-interface (WAN port + DMZ port ) ?
  • Orange interface widget while all wan interfaces are up

    Hello, I'm having a problem with my "Interfaces" widget, I have three Wan interfaces and yet they are all "UP" but the widget remains orange. My wan on interfaces for gateway: 192.168.4.1, 192.168.100.1 and 192.168.4.1 and they all respond to the ping…
  • 2.5GBaseT SFP support on XGS5500

    Does the XGS5500 support operation at 2.5Gbps of a 2.5GBaseT SFP? I have a client who has an SFP-2.5G-T from sf.com installed in their XGS5500 which is then connected over copper patch lead to a router with in-built 2.5GBaseT ports. At present the link…
  • Sophos XGS - Can not ping WAN Alias IP

    Hi, I have assigned 5 IPs to WAN interface of Sophos XGS 2100 From LAN, i can ping all these piblic IPs. From public network, only 2 out of 5 of these IPs are pingable. very weird. Any idea?
  • Create interface via CLI

    Hi Team, I am trying to create an interface in the XGS firewall via CLI : #ifconfig Port1 172.16.1.1 netmask 255.255.255.0 up but here it making only interface UP without ip, I want to know how can give Zone here, so that interface can be up with the…
  • VDSL SFP p/n - XG230 Rev2

    Looking at getting a VDSL SFP for the XG 230 Rev2 that has XG Home installed on it (not in use atm). Do we know what the p/n is etc and whether it'll work?
  • Configure lan & wan interfaces on Bridge port to work with Ubiquity Dream Machine pro

    Hi all, setup is router -> Firewall -> Ubiquity dream machine. XGS2100 is configured in gateway mode (need to use SSL VPN), wan cable to port2, lan cable to (F1), lan cable is connected to an Ubiquity Dream Machine PRO. In the F1port there…
  • How do I use extra ports of firewall as another LAN port?

    XG 135 have 8 ports. I use 1 for LAN (port1), WAN1 (port2) and WAN2 (port3) . I have excess 5 ports. LAN has Vlans IDs 20 and 30. Default DHCP is on LAN port. I want to use excess ports as LAN ports, that also get their IP from Default DHCP. How do I…
  • Interface speed Stuck at 10 Mbps - Half Duplex, Auto-negotiated, Grayed out.

    I have never been able to change my Network, Interfaces, Connection, PortA=LAN or PortB=WAN, Interface speed. The Interface speed is set to Auto negotiate and "Grayed out". I am running on a VMware® Workstation 16 Pro, with NICs set to bridged mode…
  • Deploy two sophos in different locations sharing wan network and default gateway.

    Hi, I am trying to deploy the following scheme. A sophos xg at site 1 (WAN IP a.b.c.10) and another sophos xg at site 2 (WAN IP a.b.c.11). Both share wan network (a.b.c.x) and have the same defaulf gateway (a.b.c.1). The problem I am having in this…
  • 2 vlan in the wan interface is impossible

    Hello i want to replace my isp router with Sophos gx but my isp works with 2 vlans on for internet and the other for voip and iptv is it possible to have both vlan in the wan port of the Sophos
  • Sophos XG on SG230 alle 4 Stunden WAN Port down

    Hallo, ich habe auf einer Sophos SG230 die XG v18.5.4 installiert. Ich habe 3 WAN Ports. 2 davon gehen auf den gleichen Router. Ich habe nun an einer der 2 Schnittstelle das Problem, dass nach ca 4 Stunden im WAN Link Manager das Interface als…
  • XG / XGS ongoing issues list

    Hi there, I've been hesitant with moving from SG to XGS. I did dip my toe into the XG pool by setting up one location with an XG Firewall, however the experience was poor. So I'm currently planning a hardware refresh with SG for the next 3 years as…
  • Two ISP one Sophos

    hello, I have one ISP I am using which is a dedicated 30/30mbps but the speed connection is really poor so I just want to use another ISP which will give me a 10/10 dedicated internet connection. So what I want to ask is that can I merge both the ISP…
  • Troubleshooting 10 Gb SFP+ transceiver detection (Sophos XGS 136)

    Hi, I've recently installed a 10Gb SFP+ transceiver into Port F1 of a Sophos XGS 136 appliance. I can't tell if the transceiver has been detected by the appliance as I'm getting no link light by connecting to another device. Is there a way to examine…
  • XG3300 Firewall MTU/MSS

    Hello all - I am currently using XG3300 Firewalls ( SFOS 18.5.3 MR-3-Build408) in an HA pair as my main gateway/edge devices to the internet in my company. I have 2 users that mostly work in a web based application and I am having a weird problem with…
  • How to add second LAN

    Hi all. I have a simple home network like internet > modem > SG115 firewall > switch > home LAN. In home LAN there is already a wireless mesh in bridge mode. The SG115 acts as the router and DHCP server. All wired and wireless devices work as they should…
  • I cannot add a second WAN port on my Sophos Firewall

    Hi All I am trying to add a second WAN port in Sophos Firewall (XGS126 (SFOS 19.0.0 GA-Build317) but when I add the IP address, net-mask, gateway ip then I press Save and then Update interface - I get this error: "ip address lies within the leased ip…
  • WAN Link Manager failover precedence

    The failover rule for a WAN link only allows for failover to "any available gateway." What if I want it to fail to a specific gateway, one that is active all the time? I have 3 WAN connections--these are ALL active connections ALL the time. Fios 1000…
  • XGS LAG Problem

    We have an Aruba 2930M switch with 2 SFP+ ports as a LACP trunk connected to a Sophos XGS 4300 with 2 SFP+ ports combined as a LAG. We have several VLAN interfaces setup. I am unable to pass any traffic through to the firewall. If I break up the LAG and…