IPP / AirPrint broken

I am not an expert on this matter, but is AirPrint not a Broadcast protocol? So to speak, it only works in the same broadcast domain (Network)? 

You are saying, it works fine in V17.5? Did you change some firewall rules or did stop working after updating? 

It stopped after the update to v18 and I haven't changed anything for this FW rule. The rule itself is working, tested with telnet on the IPP port 631.

Your are right, AirPrint is using Bonjour/mDNS for the discovery. I'm using an Avahi Gateway for that.

However I can also reproduce the problem with manually adding the printer as IP printer using IPP directly.

It says, that the printer is not reachable.

Thanks and Best Regards

Dom

You should start to dump this traffic. 

Maybe there is a wrong NAT in place after migration? 

https://community.sophos.com/products/xg-firewall/f/community-corner/114837/sophos-xg-firewall-how-to-tcpdump

Hi Dom Nik,

        Thanks for your feedback, I will send you PM for more details purpose.

Hi Dom Nik,

       Thanks for sharing the device access.

As per our yesterday call after applying below changes it's started working:-

• Removed IPS policy in Firewall rule id 26 
• Diable application_classification 

We are tracking this issue with JIRA ID NC-51888.

Hi Apurv,

thanks for the support session!

Today I noticed, that Apple HomeKit is broken as well. Basically it's the same behavior as with AirPrint. You need to remove the IPS policy while application_classification is still disabled.

Should I open another thread for this or should we wait for the solutions on this topic first? It might also fix the HomeKit problem.

Thanks and Best Regards

Dom

Hi Apurv,

thanks for the support session!

Today I noticed, that Apple HomeKit is broken as well. Basically it's the same behavior as with AirPrint. You need to remove the IPS policy while application_classification is still disabled.

Should I open another thread for this or should we wait for the solutions on this topic first? It might also fix the HomeKit problem.

Thanks and Best Regards

Dom

Hi Dom Nik,

         No, It doesn't require.

We will take care both in the same Jira id NC-51888.

Hi Dom,

We are trying to investigate this issue right now.  I know you raised it in October.  If you revert the config changes does it still occur?

Hi Michael,

yes it's still present with EAP3. Tested it right now. As soon as an IPS rule is added to the FW rule, it's happening again.

Best Regards

Dom