Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Control Center Dashboard

    Have a weird issue Port2 (WAN) is up and connected via PPPOE but status shows red as in down. I have rebooted twice already and still shows RED. There is internet. Any ideas?
  • Problem with PPPoE connection

    Hello everyone, I have been trying to set up a PPPoE connection for several days. Unfortunately, the connection is not established despite all the correct settings. I enter login and password, set VDSL for my internet operator, set MTU according to…
  • XG 2. WAN failure kills outgoing network

    Hello, I have 2 WAN port as long both are working everthing is ok. But as soon my 2. Fritzbox is dead (Cable Fritzbox fails like once a year, but thats another story) there is no regular outgoing network anymore. In WAN Manager both are ok, in the…
  • XG - Interface could not be deleted

    Hello, I converted a XG firewall from appliance to virtual and I want to remove old lag interfaces. I was able to delete lag0 but I am not able to delete lag1. Lag1 interface got no sub-interfaces, only two attached ports: Error message is…
  • auto disconnect internet

    hi ' please say auto disconnect internet every time then i some reboot firewall then connect internet .. please give solution
  • Interface naming issue

    We purchased two XG750 to run in HA-Active-Passive config. Each is identically equipped with 4 SPF+ ports and 2 QSFP ports. On the Primary XG the SFP+ ports are named PortC1-PortC4, left to right, but on the Auxillary XG the SFP+ ports are name eth0-eth3…
  • Sophos XG HA PPPoE slow reconnect

    Hello! I have 2 PPPoE WAN connection to each other Sophos appliances If i switch to the passive device manually or if one of the monitored interfaces goes down the pppoe reconnect time is so long, maybe this caused by the ISP modems? I am interested in…
  • Sanity Check: Cabling dual ISPs

    Sanity Check: Cabling dual ISPs into separate VLANs and then plugging each one into the Sophos WAN port. Hey All, How are you doing? I wanted to reach out and ask my fellow network engineers at Sophos for a sanity check on my setup. I have a cluster…
  • Server on Different Interface not Reachable from LAN

    I have a server on interface A with its own zone and a static IPv4. It is not reachable from the LAN zone on interface B, even though I have a firewall rule with logging on top of any other rule that says allow from LAN, Any host to Server_Zone, Any host…
  • Configure and Test Best Practice

    Hi, (First, apologies. If this question makes more sense in the UTM forums I'll start there, but I imagine doing it wrong would cause problems with my XGS too before I even get started.) After many years, and some trepidation, I'm moving from a UTM…
  • 2 WAN interfaces to 2 LAN interfaces

    Good day all, I am running Sophos XGS3100 Firewall SFOS 18.5.2 MR-2-Build380 I'm trying to get lan 1 to wan 1 and lan 2 to wan 2, and in the future it will be lan 3 to wan 3. I tried to do this via SD-WAN and Static route but after about 10 minutes…
  • Sophos XG v18.5.1 - Disable an Interface

    I read in several forum posts that the ability to disable and enable an interface was slated for a v18 feature set, but I do not see it - so I suspect it was not implemented? That would be a pretty big step back to still be missing after 4 years of planned…
  • How do I assign certain routes to each of my interface ?

    Hello everyone, Sorry for being a noob here. I have the following network map layout: I use a dual-WAN bandwidth aggregation configuration rather than a failover one for most of the interfaces. However, I look forward to: Assign my TrueNAS server…
  • Help with dual WAN config and second router

    Dear community- I have a scenario I would like to achieve with XG330 and a Synology router. Background story: We have a small office setup with a Synology router, that handles our WAN, LAN, Wifi and VPN (IPSec to GCP as well as L2TP for road warriors…
  • Conection between two sophos - cannot ping

    Hello I have two sophos connect together. Sophos1 - switch - Sophos2 I have multiple VLANS between them. All vlans have owen subnet. Phisical interface has also owen subnet. I cant ping betwen vlan interface. Whatever i use. But Phisical interface…
  • Traffic between two interfaces (LAN to LAN) only works one way.

    Hello everyone, I am trying to connect two LAN's that I setup on two separate interfaces (Port 1 and Port 5). I also created a new zone for the LAN on port 5 called TEST_LAN. Here are my rules. RULE 1: LAN to TEST LAN Source Zone: LAN …
  • XG configuration with Optimum and Arris TG1672G

    Hi Can someone help set up Arris and XG firewall? I just got cable internet form Optimum but wish to use my own cable modem. It is Arris TG1672G which I am able to configure fine until I plug in coax form cable company and it gets provider's config…
  • High reponse time on WAN ports

    Hello! For the last few weeks, I am "searching for the truth", about what is actually happening with my client XG86. The thing is, that we have very big losses in packets (over 20% when it works, when more losses occur my client is cut out from the…
  • Failover strategy for unstable wireless WAN connections

    I've got our XG firewall set up for 3 WAN connections as we are in quite a rural area and internet connectivity can be spotty. I have the primary connection, which is a wireless system up to 100mbit up and down. I have a secondary connection which…
  • XG 135 internet loss, every after 20 minutes

    I am using my Sophos XG135 as a DHCP server and configured in gateway mode, Running firmware version SFOS 18.5.2 MR-2-Build380. Internet connection is only active for a period of a bout 20 minutes and then it is lost but the WAN interface shows it is…
  • XGS 2100 | Fibre port not coming up after a reboot

    The F1 fibre port on on my XGS 2100 doesn't come up after a reboot. I have 2 XGS 2100 units in active/passive HA mode, and if I reboot both, after they come back up, neither of the Fibre ports come back uu. Disconnecting the fibre patch from the…
  • Backup from CR200iNG and restore to XGS3300

    Hey Guys, I'm trying to restore a backup file from CR200iNG 10.6.6 MR6 to Sophos 18.5 or 18.0. According to bellow link this should be possible as long a number of interface on new device is equal to or more than old device. Sophos Firewall, Sophos…
  • Anyone have Starlink working with an XG/XGS?

    There was a previous thread around a year ago where Casey Luchsinger was having issues getting a Starlink device working on an XG. The thread showed no resolution. One of our customers has ordered a Starlink service (to our surprise). Has anyone successfully…
  • Issue with ALIAS ip's op WAN interface

    Hi, We are in a migration traject from barracuda firewalls to a Sophos 2300 A/P cluster. Our cluster is running: SFOS 18.5.2 MR-2-Build380. Yesterday evenening we tried to implement our new firewalls but we have hit a issue where we were not able…
  • Cellular WAN SSL VPN??

    Hi Community. So I have 2 questions. Both overlap, so answering one may do the other. I have a client with a Cellular WAN as their only WAN connection. 1. How do I expose the User Portal via the Cellular WAN connection? The internal IP and external…