Hi, I'm new to Sophos V19. I have 2 wan links from different ISPs. I don't want to do any load balancing. All I want to do is to access some websites using wan1 link, and some other websites with wan2. I was able to do this in previous versions…

Hey guys. I wanted to understand how to better treat the SLA and the health check. My doubts: 1 - When I select custom SLA, the percentage specified in "maximum lost packet" is based on the "Example size for SLA" right? 2 - If I have packet loss…

Hi, maybe a dumb question but what does the command really do? Maybe it is because of my special setup with the BO firewall tunneling all traffic to the HO firewall. But as far as I understood the - very well hidden - comparison whenever I want to do…

Ok this is tricky to describe: Sophos XG firewall at 192.168.1.251 - Has static route to 192.168.3.X network via 192.168.1.253 router Server A at 192.168.1.17 - Has default route of 192.168.1.251, Has no static routes defined Sophos UTM firewall…

Hallo miteinander, ich habe ein Routing-Problem seit der Umstellung von Sophos UTM auf XGS. Wir haben 2x BGP-Internetleitungen vom Provider und einen zusätzlichen DSL-Anschluss. Solange ich in der Routing-Preference nicht SD-WAN-Routing an erster…

Hi Guys, One of our customers has 3 ISP links and he needs to configure one ISP for the Active and the other two as a Backup line, When active links go down, we have to use both backup links to share the traffic. Is there any workaround for that scenario…

I have a BGP peer that is exposing the following communities for a route: COMMAND--> show ip bgp 172.16.247.0 64521 64515 133937 10.5.255.150 from 10.5.255.150 (192.168.254.10) Origin incomplete, metric 33, localpref 100, valid, external Community: 67…

Hey guys, hope all is going well. I'd like some guidance on how to enable SD-WAN Zero-impact failover. My setup is pretty basic, with an XGS 2100 and two WAN connections. I have them configured in a fail-over approach (not load balancing), using an…

Hallo zusammen, wir haben bei uns die LAN- und WLAN-Geräte in unterschiedlichen Subnetzen. LAN: 192.168.121.0/24, WLAN: 192.168.122.0/24 Die Smartphones und Tables im WLAN-Subnetz sollen die Smart Displays (Samsung) im LAN-Subnetz per AirPlay oder…

I have a scenario where i need to publish only some part of the whole RIP information on a particular Interface.How can i achieve that? Right now all the routing data is sent on all the interfaces.

Hello, My company has an MPLS that is managed by the service provider, and all traffic going to the Internet from the MPLS sites comes first to my Sophos cluster which is in our main site. This was implemented a few months ago and was working fine until…

Hi Guys, One of our customers uses a 3CX system and has a separate MPLS connection for it. They bypassed the link to 3cx and accessed their 3cx server through the internet. Now they are requesting us to configure router traffic using the MPLS link…

Hi All I am hoping someone with multi wan experience can help us. I believe its down to routing. So we have 3 WAN's in operation, see our diagram attached, the copy monitors all sorts of different types of alarms and also has a phone app you can use…

I have a, what feels like to me anyway, a unique way of accessing my remote firewalls. I use the CAA client when I am at my office to authenticate myself to the firewall. This in turn allows me to access my remote firewalls via the SDWAN that is configured…

Hi, I have a dedicated WAN LINK in a router that does not support bridge mode. I want to do an SD-WAN connection group and for that I have to tell my ISP what ports I need them to port forward Does anyone know the exacly ports that Sophos Firewall…

Good Day, Hope anyone can assist me? I have an issue with my VLAN setup on our Sophos XG230. I am using two different ports on the firewall to separate the main LAN from the VLAN and want to route the traffic via the firewall. Switch already been configured…

1) If one link is being fluctuated and getting time out then how to shift all over traffic on other link. 2) how to identify both link utilization report with SVI Configuration. 3) How to identify that which Link is best path when NAT is not configured…

Hello I am new to sophos, we are carrying out a POC with your firewalls and we are having a problem, the routes choose the xfrm1 interface but with the xfrm2 ip. From what I've read it seems like a BUG NC-114075 NC-113973 XFRM1 IP: 10.1.X.2 XFRM2…

Ok so I'm in a bit of an interesting issue and I'm not sure whats going on. Recently we had a power outage that was long enough to draw out the UPS and shut down the network stack ungracefully. Up until then I was able to route between VLANs and even…

Hi! We have 2 gateways, GW1 & GW2. GW1 is the primary gateway and GW2 is the backup/failover gateway. I'm needing to route all internet-bound traffic from a specific IP address (computer) on our LAN to GW2. I also need the capability of easily turning…

SDWAN/IPSEC Tunnel Issue Setup Site A Sophos XGS 107 2 X WAN connections 2 X Route Based IPSEC Tunnels to Site B Site B Sophos XGS 87 1 X WAN connection 2 X Route based IPSEC Tunnels to Site A Issue Site B can ping and connect…

Hey guys. I have a problem that I can't figure out how to solve it. I have route-based IPsec VPN (xfrm) and when I use SD-WAN profiles for routing the non-TCP packets such as UDP from RDP or SIP are dropped. If I use the static route instead of SD…

Hallo, wir haben eine XGS2300 mit aktueller Firmware im Einsatz. Daran haben wir an Port1 eine SDSL Leitung und an Port 2 eine zusätzliche LTE-Verbindung. Jetzt haben wir das Problem, dass der gesamte Email-Verkehr über Port1 gehen soll. Es darf also…

Hi, Firewall version: SFOS 19.5.2 MR2-Build624 I am unable to locate the policy routing. It should be under the category Routing but it's not visible. Screenshot is attached for your kind reference. Kindly help me locate where I can configure…

Hello, in our head office we have a XGS2100 Cluster running on firmware version: SFOS 19.5.2 MR-2-Build624 We have some branch offices connected via IPSEC tunnel interfaces to the head office. For this we have some SDWAN Routes. Is there a way…