Hello, I'm kinda new to networking and I'm currently working on a network lab to enhance my understanding of firewall concepts. My setup consists of the following: Virtual Machines: Kali Linux VM (IP: 192. 168. 10. 128) Windows VM (IP: 192. 168…

Hallo zusammen, ich bin sehr gerne jemand, der Sophos benutzt. Früher UTM nun XG. Wir sind von WatchGuard gerade umgestiegen und nutzen nun eine XGS2100. Soweit sind wir auch zufrieden, nur die alten Sekundären Netze sind ein Problem. Wir haben…

Hello, Today I found a case that I've intermittently found in the past, but I decide to bring it up in the forum and try to find a permanent solution. I connected to a public WiFi network with an iPad. The network provided the following through…

Is there a feature in Sophos Firewall to change TTL value of packets so that the authorized users in my network cannot share internet access by creating their personal WiFi Hotspot to connect unauthorized users to access the internet through my network…

Hi there, Need your help and expertise. We have an HA here with Sophos XGS2300 (SFOS 19.5.3 MR-3-Build652). The following problem occurs in particular with Webex Audio / Video. From external to internal and vice versa, the audio and video channel is established…

Hello, I need your kind assistance regarding a new Sophos XGS116 that I am using. Can you please tell me how to set the keep alive interval of a wan interface? It is set to ping at 8.8.8.8 but I do not know the interval of pings, how often they are. …

Guten Morgen liebe Gemeinde, Ich habe eine Frage bezüglich VPN und DHCP. Vorab, ich bin nicht der fitteste in Sachen VPN. Derzeit habe ich einen VPN Tunnel zwischen meiner Sophos XG Home und einer Fritzbox 7530AX laufen. Das klappt auch alles wunderbar…

Hello, We just added a secondary ISP and I set it up as a new WAN interface. A laptop plugged into it gets an IP address and can get out to the internet, so I know it is working. I configured WAN failover (active-backup) and initially didn't modify…

Two on-premises servers are presented. Now is it possible to configure load balancing from Sophos Next-gen firewall? If possible then what kinds of requirements are needed?

Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. ______________________________________________________________________________________________________________________________________…

Hallo zusammen Irgendetwas wir noch von der Firewall blockiert. Da das Telefon direkt am Internet Router funktioniert. Es gibt zum testen eine Firewallregel, die jetzt erstmal alles erlaubt.(Siehe Bild) Hilft aber auch nicht.:-( Kann einer einer…

Hello guys, my client is migrating from ISP to another. As you can see in the picture, this is gonna be the new topology. Is it possible to configure this way? I want to join Port2 and Port3 as a LAG interface; Port4 and Port5 as another LAG interface…

Hi, I observe a strange behavior regarding UDP Reply Packets on multiple WAN interfaces. Since we have configured a SIP hunting group with our telephone provider, the provider sends option pings on the 3 existing WAN interfaces. 3 DNAT rules are set…

Hi, I am new to sophos firewall world. Yesterday, I discovered that my firewall is still accessible using the default ip address that was assigned for initial configuration. I have discovered that Port 1 has this IP but there is no ethernet plugged…

In many customer-projects we need to change the interface <-> hardware-port associaton within network-projects. I'm aware that you can use XML export/import to do this, but there still the risk to forget about some dependencies and failing manual config…

Hallo zusammen, für mein Eigenheim plane ich eine XGS 107 an einem Telekom Glasfaseranschluss zu betreiben. Am liebsten würde ich auf das externe Glasfasermodem verzichten wollen. Über Sophos Hardware & GPON SFP Fiber / Glasfaser How-To habe ich nun…

Hi all, I need some help with redoing my firewall setup. It was done a while ago and I’ve made some mistakes that I’d like to correct but want to minimise the amount of work. Here’s what I have : my firewall is a 6 ports firewall. 2 have been…

There are some errors in the predefined "Internet IPv4..." hosts. This list is the clearly wrong ones imho. Internet IPv4 (129-169) should be "(128-169)" Internet IPv4 (191-191.1) seems completely mislabeled, and likely incorrectly defined altogether…

I've been looking at a strange issue on my devices regarding IPv6 addressing (at least an issue I think is strange). I am not using SLAAC. I have a Sophos XG acting as a DHCPv6 server issuing a private IPv6 prefix, let's call it AAAA:AAAA:AAAA:AAAA:.…

Need some help getting our Sophos XG 136 (LAB) Firewall working with IPv6. ABCDC01: Role = Windows Server 2019 Domain Controller IPv6 = fc00:2222:3333:4444:cccc:dddd:eeee:10/64 IPv4 = Not Enabled Gateway = fc00:2222:3333:4444:cccc:dddd:eeee:ffff…

Hi All, I have a Internet Link from FiberOne ISP. I used a media converter to convert the Fiber link to Rj45. Then I plugged it into a ASUS DSL Modem/Router to use Wifi. in this situation, I got IP Address A, and I have the internet. But, I have a lot…

Hi All... Customer has XG135 (SFOS 19.5.3 MR-3-Build652), Sophos is the main DHCP server for the network, for the last few months we have been battling with a strange issue. Sophos LAN IP is 172.16.0.10 Internal Microsoft DNS server 172.16.0.1.…

Hello! We are planing micro segmentation of our server farm and thus will need a bunch of vlans in the range of 200-300, but there seems to be a limit on how many vlans can be added to a physical interface according to this kb: https://support.sophos…

We have been asking for the DHCP option for TFTP boot options to be fixed and the reply was It is planned to be fixed in the upcoming v20.0.1 MR-1 Can you please post the schedule for the net coming maintenance to be ready for release?

Hello, I have been trying and failing to get SNMP monitoring working for my Sophos XG firewall using PRTG. I have done the following to try and get this working: Enabled the SNMP agent in the firewall config Added the SNMP manager address and…