Hallo zusammen, ich habe XGS mit 2 Sophos APX APs managed über die XGS. Ich möchte nicht auf die AP6 mit Cloud wechseln. Beid en APX verwendete ich die HotSpot Voucher für das Gäste WLAN. Ist es möglich z.B. 3rd Party Access Points so zu verwenden…

Hi everyone, We have an IPsec site-to-site VPN connection between our Sophos and Fortigate devices. Currently, both the gateway and tunnel are UP and functioning properly. VLAN 10 and VLAN 20 are included in the local subnet configuration on the Sophos…

Hi all, i have had a look at the Invalid Traffic page but as stated at the bottom doesnt resolve the issue, just reduces the number of logged entries My setup is as follows Core network is TPLink Omada (Manages the vlans) Sophos setup: Port1 …

Hallo, ich betreibe ein Netzwerk mit 2 Standorten mit folgender Konstellation: Am Standort 1 befindet sich eine Sophos XG210, am Standort 2 eine Sophos SD-RED 60. - VLAN_LAN mit VLAN-ID 1010 - Bridge_LAN mit den Schnittstellen VLAN_LAN und Port1…

TLDR - IEEE 802.1Q reserves VLAN ID 0 for a special purpose. Sophos XGS firewalls do not implement this special purpose correctly, preventing communication with some ISP Gateway modems. The request for proper implementation of VLAN ID 0 handling is being…

Hello, I've added a DHCP-Server for an interface on my XG. The interface is an RED-VLAN-Interface and ping from the switch is working. An Accesspoint connected to the switch did not get an IP-Adresse. Today we found out, that we have the same problem…

Hello all, I'm used to another known firewall vendor but I decided to give this for my home network a try since the other solution is way too expensive. My goal is to use a single link between my switch and my Sophos appliance so I do not need lots…

Hey everyone, i have a problem here which turns out to be my final boss. What am I planning to do? I run two Sophos UTM firewalls at home, a UTM 320 which manages the LAN and an SG115 which manages the WLAN. I switched to VLAN operation, before…

Hey liebe Sophos-Community, ich brauche eure Hilfe, da ich sonst nach drei Tagen rumprobieren wahnsinnig werde. Was hab ich vor? Ich betreibe zwei Sophos UTM Firewalls zuhause, eine UTM 320 welche das LAN verwaltet und eine SG115 welche das WLAN…

We have a customer with Cisco IOS switches, 10Gbit backbone, and move huge data around (CAD/manufacturing files) between VLANs. Most of our technicians cannot manage the Cisco IOS switches, only 3 of us are comfortable in the CLI. We would like to swap…

Hallo zusammen, Ich möchte folgende Konstellation erreichen: Sophos XG210 in der Hauptstelle und eine RED60 in einer Aussenstelle. Darüber möchte ich 4 Netzwerke verbinden. Port 1 LAN 1 IP 172.16.16.1 VLAN 1010 untaged RED Port 1 Port 4 LAN…

I have created a new vlan and dhcp on the XGS, configured the vlan on unifi wifi/switches, I am getting ip however I cannot get internet access. I don't want the vlan to access other vlans however I want computers inside the vlan to communicate with…

Hello Everyone, I am having a little configuration issue with my web server on a VLAN. All my VLANs have internet access but I can't seem to access my web server from outside my network. Can anyone post an example firewall rule from Public IP to VLAN…

Hi, We've run a flat lan for years at our main location. We've recently updated our network and added a few new VLANS to the mix. Now I have a problem. We have several Site-to-Site VPNs up and running that work great with our original VLAN1. However…

Hi, my current network looks like this. This is a double NAT scenario but works quite well. Now I got a Unifi USG for testing purposes. I'd like to add it between the Sophos XG and the Unifi Switch. The Sophos should keep on managing DHCP, DNS…

Hello, we got 2 new XGS450-firewalls. Currently the configuration is blank. The firewall should manage the vlan traffic. We have 3 branches. They are connected with a cisco mpls-network. Our internet-firewall in the mpls network: Should be…

Hallo, ich habe hier zwei Standorte, die sind per Site2Site Tunnel verbunden. HeadOffice mit LAN-A und Branchoffice mit LAN-B, beide sind mit einem Tunnel verbunden, keine Probleme. Im BranchOffice steht eine XG125 ( SFOS 20.0.1 MR-1-Build342) …

Hello , I have 2 SSID Data (vlan 10) , building (vlan 20). I have one mobile device who sometimes connect with data , sometimes with building. I can make a reserved IP on Mac adres for vlan Data (10) , but i can not reserve another adres for vlan…

Hello Sophos Community, I am a Sophos beginner and have questions regarding the options for site connection via REDs or site-to-site VPN, as I have no practical experience here. What are my requirements? The idea is to connect 3 locations, whereby…

Hi, here is my setup, i have 2 VLAN ( 20 and 30 ) and both have DHCP enabled, and both have similar setting. VLAN is supposed to be used for Administration purposes and VLAN 30 for production traffic. VLAN 20 does not have access to Internet…

Hello. I wonder if Sophos Firewall could be set up to have each VLAN having different WAN gateways ? For example, VLAN 1 will go to WAN 1 and VLAN 2 will go to WAN 2, so that there will virtually be two networks. Originally, I was thinking to set…

I have an APX320 on Port1 of an XGS. The original setup was to first bridge Port1, PortF1, and Port4 onto a bridge, LAN_Bridge, and then have the AP send three of its SSIDs down VLANs and bridge the other SSID to its LAN (LAN_Bridge). So the VLANs (LAN_Bridge…

I just learned a lesson and am sharing my experience, which will hopefully save others time. We had a severe electrical storm in middle of the night. When I got to work, 2 LAN connections (fiber) inbound from ISP down, but 2 ISP Internet connections…

I had our Sophos XG87 configured by our reseller when we bought it, since I knew nothing about how to do it properly. I've learned a lot and have changed quite a few things, but want to make a foundational change that will require destroying several things…

Port 1 was configured for LAN Usage VLAN 20 was added to Port 1 Port 1 was then unbound, VLAN 20 went away. Created VLAN 2 on the (unbound) Port 1 Wanted to create VLAN 20 again and add to Port 1 as well Get message " Interface name exists.…