Wireless Open Port

Hi Giannis Karachalios 

Have you checked the Firewall logs in UTM9? What does it say? Further, would you please try creating a Firewall rule to allow traffic between Wifi Network? With source and destination as Wifi network. That might help.

Hello 

thank you for your reply

i have already tried your suggestions. A firewall rule(with logs allowed) allowing traffic from the whole wireless network segment to itself with all ports for testing purposes.

Firewall logs don t seem to be helpful at all

Something i might be missing?

Best Regards

Is there anything in the packetfilter.log? Check the packet flow using TCPDUMP in UTM. Use this command: tcpdump -nei any host <src.ip> and host <dst.ip> and follow the step 1 to sign in as Root in CLI of the Sophos UTM

Hello Jaydeep 

thank you for your reply

i tried tcpdump before no traffic between the device and the pc.

But i recently found out something else

The device with IP 192.168.3.52 sends to Link Local address for some reason.

11:50:36.405426 In 98:8b:ad:20:b7:9f ethertype IPv4 (0x0800), length 66: 192.168.3.52.39508 > 169.254.14.95.10080: Flags [S], seq 788390100, win 8192, options [mss 1460,nop,nop,nop,eol], length 0

I did arp -a both on pc and router everything seems ordinary

Hi Giannis Karachalios 

If the TCPDUMP says that packets were sent to an APIPA IP, then there's no issue with the UTM. You may try to install Wireshark on your machine and check which destination IP address the traffic is sent to. 

Hi Jaydeep 

I tried the device and the same PC on a different network with different router and it worked instantly. Same settings on PC, no changes.

I have wireshark on the PC and it captures packets from the Device IP for example when i ping it but not when i try to connect the Device with the PC (i am expecting to see packets coming from Device to PC on TCP port 10080 and UDP 1024 and 8010).

Best Regards

Hi Giannis Karachalios 

It's interesting that the device is able to send out packets to correct IP address when in other network but not when connected with AP30. I recommend creating a case with Sophos Support as it's important to check the packet flow and how it is handled by the Sophos UTM. I'd suggest you check the PING from the device to the PC and vice versa. It should give an idea of where it's getting dropped. Please let me know the case ID once you've created.

Hi Giannis Karachalios 

It's interesting that the device is able to send out packets to correct IP address when in other network but not when connected with AP30. I recommend creating a case with Sophos Support as it's important to check the packet flow and how it is handled by the Sophos UTM. I'd suggest you check the PING from the device to the PC and vice versa. It should give an idea of where it's getting dropped. Please let me know the case ID once you've created.