While looking at our FW logs I see UDP packets from internal devices sent to a FW interface with dstport=0.
2023:06:23-14:20:19 FWName ulogd[31041]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule…
Hello.
We have a sophos UTM 9 in our company.
Our client gave the ports and then added in the Rules Tab but seems no luck.
TCP/UDP: 5060
UDP: 10000-20000
I am new to sophos. Appreciate your help.
Thanks,
Jade
[this is now an FYI, as whilst writing this, I found the issue - others may benefit from this, so i'll complete the post]
I have a single PC on my network, and some https traffic (all to either google, facebook or instagram) is being dropped against…
Having issues with audio with voip provider callwithus. Also have callcentric configured which works fine because there's a defined set of servers for media.
The call is initiated successfully, but the issue is with the audio/rtp media. Callwithus doesn…
Hello all.
So, Sophos UTM9 don't have official addon for Splunk.
1) And I need to parsing logs via UDP input. How should I do it?
Or,
2) I will install one random addon from splunkbase (there are 3 non-official addons) but the problem is that…
Hi,
I run a Sophos UTM 9 at home which I've been running for well over a year now and it's been very good. I have a stack of firewall rules for various devices and I've configured various rules for things like cameras and VOIP phones.
My recent…
Hi all,
I am running UTM 9.407-3 virtualized on VMWare 6.0. I am experiencing inbound/outbound UDP packet loss (between 5-10%). I've ruled out it is my VMware setup, as I have an Ubuntu box running on the same VM host that the Sophos UTM is running…
Hi,
Would like to thank Bob for the suggestion that put me down the right path.
Bridging was the magic component that was required.
I thought I'd provide a bad sketch of the setup.
ISP A - 4G WAN Router (DHCP, with local network.) (On this…
Hi All,
we switched our SSL VPN over to UDP, which improved transfer speeds significantly.
Just a couple users sometimes have issues through it since the change, maybe due to their connection (at home).
Could we please have the option to enable…