Hi, I have a proxmox hypervisor I use it to spin up VMs and LXC containers, and I use MAC addresses to enforce some rules on my Sophos firewall. how can I add a MAC range so all the new VMs that have random generated MAC addresses (under the same vendor…

Hello , I have 2 SSID Data (vlan 10) , building (vlan 20). I have one mobile device who sometimes connect with data , sometimes with building. I can make a reserved IP on Mac adres for vlan Data (10) , but i can not reserve another adres for vlan…

Hi, ich würde gerne bei manchen Mitarbeitern den Internetzugriff der Smartphones auf eine Stunde täglich beschränken. Hierfür gibt es grundsätzlich die Möglichkeit Benutzer anzulegen und darin die gewünschten Beschränkungen zu konfigurieren. Da…

Hello again, experiences with XG are splitten between "hm k" and "wtf", only view things which seems to be really better. First thing (opinions are different here), its a shame that you cannot define hosts with IP and MAC in the same object, also…

I would like to know how DHCP server works on a XG Firewall. Is there any relationship between computer MAC address and the IP address assigned by the Sophos firewall DHCP server?. Address are assigned in a consecutive order? Thanks in advance.

Hi, Is MAC binding feature introduced in v19.5. As we want to achieve MAC binding in IPsec remote access VPN so that only allow MAC addresses can connect to VPN. After searching, this is not achievable as XG doesn't recognize MAC pre-connection. …

I have configured a captive portal for users authentication, for some purposes i have to bind each user with a specific MAC address, can any one help me Best regards

why mac binding is not supported on PPTP-VPN SSL-VPN and ware the MAC binding is supported

Hello, can someone explain to me when I should use a MAC host and / or an IP host, when does that make sense. Or do I even have to create both, although in my other thread it was already discussed why there is not a finished client object. It is…

Hallo zusammen, ich habe seit einigen Wochen die XG FW daheim am laufen. Nun habe ich folgendes Problem wo ich einfach nicht weiter komme. Ich möchte anhand einer MAC-Adresse den Internetzugriff sperren. Ich habe mit der entsprechenden MAC einen MAC…

We try to bind the user MAC with client based authentication mechanisms. https://support.sophos.com/support/s/article/KB-000035643?language=en_US But the user can still login on ever machine. What works is a release via the MAC-Host and a Firewall…

Hi, When trying to ping DC behind the rbvpn from XG, the traffic is routed to WAN interface. Was looking into this https://support.sophos.com/support/s/article/KB-000035830?language=en_US How does this works with rbvpn when there are two tunnels…

Hello, I found the following bug. I have created a rule to block the Internet (MAC blocking). If I want to temporarily deactivate this rule, this rule does not work. The Internet is only released after restarting the firewall. The blocking, however,…

Hi, I'm configuring the mac-address binding for each user authentication for our SSL VPN but I noticed that even if the mac address is not included in the mac address list. It can still connect to the SSL VPN. Any thoughts?

Does Mac Binding not work if you are using a split tunnel?

Hi, I am new to Sophos XG, Would like know how many total number of Static mappings can be done? Reason i am asking is in Zywall USG40 maximum it allows 50 IPs for mac binding. Does Sophos XG has these kind of restrictions based on the model? Thanks…

German / English Ich möchte meine Kinder im Internet beschützen. Zusätzlich sollen die Kinder nur begrenz zugriff auf Internet inhalte erhalten und auch nur bestimmte Anzahl von Stunden surfen dürfen. In meinem Netzwerk befinden sich mehrere Laptops…

Hi; I've the same problem with MAC binding too. I can bind devices (like PCs) by IP but what about wifi connectivity or other OS? Is there any solution? Regards,

We try in two different model XG450 (SFOS 15.01.0 MR-1.1) and XG 85 series , result are same. I create a user with single simultaneous Login and bind with mac address of device A. Now i am trying with device B with same user i am able to login and…