Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Windows deployment services (PXE boot) and Sophos XG210

    Hello, Anyone using Windows Deployment Services (WDS) with Sophos XG210, using Windows DHCP server. Clients on one VLAN and the Servers on another VLAN? Any step by step guide or tips? Pulling my hair out on this (almost bald!)
  • PXE boot and sophos xg210

    Hello people, I have a question about PXE boot from Windows Deployment Server with XG210 in between, doing InterVLAN routing. This is how it looks like Windows Deployment Server (192.168.1.11/24) , Windows DHCP (192.168.1.10/24) |------------…
  • Sophos XG & Bridge & VLAN

    Hi everyone… I need help to configure Sophos XG Firewall and help with understanding how bridge and VLAN's work on XG(If they work) and how to TAG/UNTAG VLAN's… There is requirement for 3 separated zones each with own VLAN, own DHCP Server and own…
  • VLAN packets showing up on wrong interface and being blocked...

    I have a Guest VLAN on VLAN 100, attached to the Bridge on our XG. It's set to Masq out our primary WAN connection, but otherwise be blocked from any local traffic. However, the packets seem to have issues traversing the gateway. Looking at the Firewall…
  • XG106 Backup WAN v18.5

    Hi all I'm still a bit new to Sophos XG, so apologies in advance if I'm not using the right terminology etc. Am running the latest firmware ( SFOS 18.5.1 MR-1-Build326) and the current WAN uses DMZ to enable me to add VLAN tagging as required by the…
  • Disable ping and http/https access to Vlan interface IPs?

    Hi all, Is it possible disable ping and http/https access to VLAN interface IPs? Is this to be performed via FW rules?
  • Create Vlan

    Hi everyone, i have some tests in sophos home xg v18.5 with vlans, my exemple is below: dhcp: then i have a dlink switch webmanaged port1: go to Sophos port2: go to pc pc cannot obtain ip. an you help? Thanks.
  • VLAN routing

    We are trying to start with a ping to a VLAN. I have port 8 on my Sophos XG with an IP on the VLAN. That cable is going to a port on a layer 3 switch. We setup rules to go back and forth and setup routing for that network. When I hook directly into that…
  • Strange SSH behavior on XG210

    Hello chaps, Starting a new thread on strange SSH behavior. I was not able to connect to a switch in VLAN via SSH but I was able to connect to a HTTPS server on the same VLAN. Noticed the XG210 Log viewer says Invalid packet/Invalid TCP state when…
  • [Resolved] How to ssh into Core switch from Mgt PC, using XG210 to perform InterVLAN routing

    Hello all, I'm stuck at the following, hope to get the community's help. I have the following network configured. I am trying to ssh into the CORE SWITCH from the MGT PC but to no avail. XG210 is currently configured to perform InterVLAN routing via…
  • Inter VLAN Communication is not working

    Hi I am using Sophos XG115 as the firewall and i do have a layer 3 switch (Unifi 8 port POE 60W switch) which leverages VLANS created & tagged at XG115. Users in different VLANs want to connect to devices (e.g. Network Printer and Network Attached…
  • How to set VLAN ip address with /28 netmask in SFOS 18.5.1 MR-1?

    Hello Chaps! I've managed to setup the company's XG210 and now configuring the VLANs. I've got couple VLANS which will need to talk to one another but for now, I need to configure one VLAN for hosts with static IPs. This VLAN is #100. I could…
  • VLAN Outbound Traffic

    I have a VLAN that setup that inbound rules are working but outbound traffic is not able to get out. My Network is as following XG210 HA (Active - Passive) | Port E4 (DMZ) Tagged | PortE4.301 | HPE Switch | Host
  • Planning for secondary datacenter site with a secondary ISP - routing and ISP failover questions

    Hello - Looking for some suggestions here while in the planning stages... We currently have 1 datacenter, with 2 ISP connections going into a pair of XG550's (an HA Pair). This is working fine today. We have miles of dark fiber which we light, and…
  • VLAN - SOPHOS XG

    How many vlans can I create per port in Sophos XG?
  • Setting up VLAN for ISP connection

    I switched to an ISP that requires VLAN tagging the WAN connection which I've done by adding a VLAN interface for the ethernet port the connection to the ISP is with the appropriate VLAN tag. Everything works as expected. However, on the physical interfaces…
  • ARP Proxy Vs Static Routes

    Hi, I have VLAN and for that I have configured Static Routes. Is that I can configure ARP Proxy instead of Static Routes. Manish
  • Block DNS resolution between VLANs

    I'm looking to use the built-in DHCP and DNS server on the Sophos XG on my "Main VLAN" but I don't want other VLANs to be able to do any nslookups for the host entrys. Today VLAN1 has it's own DHCP and DNS server and the other VLANs uses the Sophos…
  • LAN to VLAN Traffic

    Hi, Following configuration: Port1 192.168.0.251/24 Port1.200 192.168.0.9/24 Testing the traffic: In my opinion, the traceroute should use 192.168.0.251 as first hop. But it uses the 192.168.0.253 witch is the MPLS router. We can't reach…
  • VLAN Setup on XG125 v18

    Hi there, my client has a basic setup with one local subnet 192.168.3.0/24 on the XG standard physical LAN port 1. Now we are about to introduce new switches and vlans to separate his traffic from his tenants'. The current subnet needs to be preserved…
  • Understanding on how to route between devices on seperate Interfaces

    Hi. Many thanks for reading this, I am hoping someone may be able to throw some light on what I am trying to achive. I am new to the Sophos XG platform but I assume what I am trying to do is possible. Here is my scenario. Two companies in the same…
  • Routing Subnet with local NAT to Remote Subent through VPN Tunnel

    Good Morning, i am looking for a routing solution for my network to a remote location. We use a Sophos XG 18.0.5 MR-5 and i use a Site2Site Tunnel between two Subnets. Head Office 172.17.5.0/24 and BO 172.26.176.0 Our local Subnet has 192.168.0…
  • Outbound rule help

    Hello, I have a doubt regarding the output rule, I have 2 wan links and several vlans on the LAN, I am not able to make a particular host use one of the links according to my decision.
  • reverse routing

    hii I've sophos xg 310 An Aruba 8320 connected to it. I configured on Aruba VLAN 10, 20 and 100 so that 10 and 20 can communicate to each other and 100 can access only internet. vlans working fine.. but VLANs can not access internet through XG…
  • VLAN HELP SOHOS XG 135

    Hello, I ask for help please since I want to configure a VLAN on my LAN network without success My network lan is 172.16.2.0/24 and the vlan that I want to configure is 192.168.200.0/24, the LAN network is configured on port 1 of my Sophos XG…