I have sophos xg210 , i want to terminate my mpls link to it , my link is an mpls , but the source of mpls cannot ping my computer but i can ping his computer , what could be the issue?

Moin zusammen, ich habe folgende Verständnisfrage: Wir betreiben an unserer UTN (XG230) drei WAN-Anschlüsse. Diese sind unter Netzwerk-Schnittstellen eingerichtet und Mitglied der Zone "WAN". Die Internetzugriffe über diese Leitungen funktionieren…

Hallo zusammen, kommen wir hier im neuen Forum auch direkt mal zum beliebten Thema der neuen SD-WAN-Richtlinienrouten. Ich habe da noch so meine kleinen Probleme und kann das in meiner Sprache hier wohl besser erfragen Also generell funktioniert…

Hallo zusammen, haben eine Sophos Xg mit Firmware 18 in Betrieb genommen. Wir haben eine Firewallregel erstellt mit der Regel von LAN nach Wifi alles erlauben. Bei den Appliance Zugriff ist alles aktiviert in den Zonen. Leider scheint das…

Hello guys, Currently Im rewriting Ipsec Tunnels from Site-Site mode to Tunnel Interface + SDWAN + SDWAN profiles I have the following scneario All BO connect to HO and each one to BO After rewrite it to Tunnel Mode and using SDWAN and…

Hello everyone, after days and weeks of trying I finally got a working VPN connection on my XGS! Now I need one more thing as they say: I want one specific VLANs clients to route all NAT Traffic through the Head office Firewall. Why? Geoblocking…

Hi Everybody! After reading the following link: Sophos Firewall: How to prioritize the traffic via SD-WAN for the applications I can not redirect applications and services traffics to specific WAN link, even after changing route precedence to SD…

hi all, i have a client, and i want it to go out a different IP, rather than my default gateway, ie my main WAN ip ive assigned to a port on the FW so my ISP has given me mutiple public IPs, i have assigned my WAN port one of them ie main one and…

I have a setup where branch offices uses resources and services from head office . Our ISP requested we do BGP configuration for better performamce of their service. After the configuration and connections established, branch offices are able to use…

I would like to route my WhatsApp traffic through various gateways. I have established an SD-WAN rule, which currently works only with IP addresses. However, as the IP addresses keep changing over CDN, I prefer to use Fully Qualified Domain Names (FQDN…

I work for a small university with a main campus and a single, annex building which is off-site. I have configured a XGS 2100 with an IPsec tunnel between the locations, which is working great. The problem is that I have no internet traffic from my LAN…

hi all, how do i change the route precendence from Static route, SD-WAN route, VPN route. to Static route, VPN route, SD-WAN. so the SD-WAN is the last when i change, the firewall doesnt require a reboot does it? thanks, rob

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview SD-WAN Application Object…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. ______________________________________________________________________________________________________________________________________…

Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Traditional Settings For Primary…

Disclaimer: Much of the content below was written in V18.0. The online help of V20+ may be a better source of content. https://docs.sophos.com/nsg/sophos-firewall/21.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/Routing/SDWANRoutes/index.html …

I am very confused why this isn't working on the Sophos XG but is working if I make a static route on a Windows 10 PC. The below is what I'm trying to accomplish and what the IP and subnets are that are involved. Any assistance in how to accomplish this…

Hi, When creating and SD-WAN connection group in central, we get to configuring interfaces and have the option of choosing either "SD-WAN profile" or "Primary and Backup gateways". What is the actual difference here? It's not explained anywhere…

hi all, want to make WIFI traffic go out a new WAN interface, i think im going to do it like this, what you think network > interfaces network zone WAN, add ipv4 details and give it a gateway ip rules and policies > nat rules "default SNAT IPv4" change…

I have created an SDWAN routing to route a particular internal network via ISP 2. The problem is even traffic destined to DMZ zone in the same firewall is being routed via this SDWAN policy towards ISP 2 interface. How can internet from an internal…

Hi we have two new XGS2100s in HA that have replaced an XG230 On the older XG230 under OS 18.0.5 we had problems with printing from a web server externally to our internal Star CloudPRNT enabled devices (over TCP443). They are very sporadic and…

Hello I've got a strange behaviour when upgrading to SFOS 19.5.1 MR-1-Build278 from 19.0.2 MR-2-Build472. (XGS107) Both of my static routes are not available after upgrade and can't be reestablished. In Version tree 19.0.x everything is fine,…

So here is the deal - I have an entire network of devices (switches, APs, computers, laptops, servers, printers, IoTs) that was all built on a /16 subnet using public IP space and it is all just using default VLAN/VLAN 1. 176.100.x.x/16. It is slow…

Hi, I have the the following setup: Office FW (10.1.0.0/24) <==Policy based ipsec==> DC FW (LAN: 10.2.0.0/24; SSL-VPN: 10.3.0.0/24) <==Route based ipsec==> Partner FW (172.20.32.0/24) I try to announce the routes for the office (10.1.0.0/24),…

Hie Guys, so im try to configure failover using ospf and a static route that uses a different link . so ospf works fine, when the destination network is not reachable the route is removed etc. but when i configure the static route with an administrative…