• HTTPS Port address translation (PAT) not working

    brent sergent
    brent sergent
    Discovered this little gotcha when creating services for https port redirection. When creating the new port keep the source port as general ie. tcp/udp (1-65535) NOT the port you want to use. example which works NOT source TCP 4433
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • wan failover

    José Manuel González García
    José Manuel González García
    Hello, Situation: I have published web services in one of my Wan1 with DNAT/SNAT and I am looking for a way that if my ISP provider of my Wan1 fails, the inbound traffic from Wan2 is automatically redirected. What comes to be a Round Robin. Thank …
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • FTP Server (Passive Mode) on WAN Interface via DNAT - WAN -> Local Server - stuck with SYN_RECV on local server.

    precious pangolin
    precious pangolin
    Hi All, I think I need a little help. 1. Used DNAT rule to route public ip to private ftp server - service FTP. 2. set advanced-firewall ftpbounce-prevention data 3. On my local network I can login to my ftp server via "ftp public_ip" I can…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • DNAT problems

    Graham Chow
    Graham Chow
    I'm a home user, and I'm trying to configure my Foundry VTT server. via my XG v19. When I try to http to it via the WAN, I get a violation error (as you can see in the logs). I can HTTP to it using my fqdn ( http://titanbananabefore.online/) via my…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Strategy for RDP to server behind firewall?

    atsushi kami
    atsushi kami
    I have a Sophos XG behind which is a server which I'd like to access via RDP. I have DNAT setup to forward the port to the server, but I don't want to leave it turned on all the time. I could turn on remote HTTPS to the FW, and turn the DNAT rule on and…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • connect to dvr camera from external

    Fotit
    Fotit
    Hi, I have DVR in branch office with sophos firewall. before install FW , the admin of dvr connect to dvr camera with his phone by gDMSS application.( but only too view what camera show) the access from external is not to dvr web admin. After…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Destination Server not showing public ip of remote host in netstat

    Sophos User6458
    Sophos User6458
    Hello Team We have created one DNAT Rule for one of our Application to connect from outside. When users are login into application from outside and we check the netstat status in command prompt on windows server, we are not getting the public IP of…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • DNAT TO IIS SERVER

    Leonardo Rebelo
    Leonardo Rebelo
    Hi I have a issue This is the DNAT rule : the service : The IP 192.168.11.12 is a webserver that is running on port 50002 https. Our customer want a portforwarding to that port . SO publicip:50002 -> web server page . But I see that…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • XBox Live help please!

    Tech127
    Tech127
    I've been at this for hours and just give up and am asking for help. I have just installed XG on a Protectli last night that I was using for Untangle. I don't have any more time to "fish" in the Google river. I think what I need is simple? I hope... …
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Pass public IP address to LAN device

    Danny Webb
    Danny Webb
    Hi experts, I am new to this so please bear with me! I have Sophos XG115 (SFOS 19.0.0 GA-Build317). I have set-up a standard firewall rule and policy that forwards any public request for my domain name (i.e. abc.com) to my back-end web server on the…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • XG V19 port forwarding but getting Local ACL Violation

    Bryan Lucas
    Bryan Lucas
    Good Day, I'm trying to set up a port forward (RDP) from my WAN interface to a device on my LAN. The rule migrated from V18 MR4 isn't functioning, and neither are any rules I set up from scratch. Any FW/NAT rules I set up show zero on their counters…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Error acess Website sophos

    sansao machiana
    sansao machiana
    help in my company we have an XG 230 all the rules are configured and working we could go the other web pages. but when we try to access our web page from the internal network the firewall takes us to the authentication page. already pointed the host…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • No Ping after DNAT

    sebmoe
    sebmoe
    Hi folks, I have the following problem: I have an icinga 2 running in my network and I want it to ping a remote network via S2S. This does work, but as soon as i create a DNAT with HTTP and HTTPS to my icinga, it stops working. What i tried: …
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • DNAT PORT FORWARDING - XGS2300

    MasterJoker
    MasterJoker
    Hi Team, I need to open PORT:10443 in "PORT 5 => WAN", in SOPHOS i opened it & create DNAT/Rules, in the ROUTER (internet) and serveir same opened. but not working... I can PING the IP Public, but the port not work. Network Diagram: NETWORK…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Unable to forward Plex for direct connection

    Eric Gosselin
    Eric Gosselin
    Hi everyone, I just upgraded my old sophos UTM, to the new XG firewall (SFOS 19). Now I can't make my Plex server accessible from internet. I try to use de DNAT server assistant, but it doesn't work. Did someone manage to permit direct connexion for…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • WEB SERVER PUBLISHING CHALLENG

    Jackson Awe
    Jackson Awe
    Hi I got a challenge publish my internal server for the first time i was succeed to publish using DNAT but the internet connection in the LAN IS DISCONNECTING EVERY TIME but the server is in LAN and it has network
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • NAT rule for Loopback and VPN connections

    Can carmack
    Can carmack
    v18 newbie here. in earlier version 17, there was only the firewall rules for all connection types. In 18, have to create nat rules too. There is no usage count on some of my migrated after 2 weeks from upgrade. Lan to lan communication requests…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Tapi behind Firewall Sophos XG

    Eduard
    Eduard
    Hello, I can not get connection with Elmeg Router TAPI Driver from my client to telefon System we use following setup: Internet --> Elmeg Router which has a telefon system build in ---> Sophos XG Firewall ----> Local Lan Client The client…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG CR35wiNG (SFOS 17.5.15 MR-15 . Issue about Port Forwarding

    Adam Adam1
    Adam Adam1
    Hi All How can i set the Sophos up to acces printer form the outside of the network. Are you able to explain it to me ? Thanks All the best
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Cellphone Mobile Extensions port forwarding

    Euliana Masuka
    Euliana Masuka
    Hi everyone? l am having challenges port forwading on SOPHOS XG86 (SFOS 18.0.5 MR-5-Build586) C0A100TC22HGK7D port forwarding for SIP and RTP on your router
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • ssl vpn to dnat

    lior me
    lior me
    hi i have currently a dnat for a local pbx in sophos xg firewall from the wan, everything works fine. but when a user connects to vpn, he cannot reach the public ip, thus can't use the pbx. this public ip seats in the same FW as the vpn, same system…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Microsoft Always On VPN through the XG - connection problem with users coming from another enterprise network

    balletbob
    balletbob
    Hi, We have DNAT rule setup for our Microsoft Always On VPN but have two locations we travel to where on those network we can't get the VPN to negotiate connection successfully. I need to validate what we have setup to figure out what is going on…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • STUN/TURN Server Reachability

    BeEf
    BeEf
    Hello, our development uses a STUN/TURN Server located in our DMZ. The DMZs have public IP Adresses and they are reachable from the inside networks directly through LAN and Firewall without many restrictions. For the testing setup they want to reach…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • MAC Address Exclusion XG Firewall

    Sophos User6087
    Sophos User6087
    Hi all, Currently in our environment we have a LAN to WAN rule and WAN to LAN rule, which both block traffic from a set country list. For example, we can’t access sites in Russia and any data from Russia can’t access our LAN. At the moment we have…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Helium miner 44158 port forwarding.

    Hau Lin
    Hau Lin
    I'm trying to setup a Helium Miner on my home network and need to direct port 44158 to the miner. Let's say the miner's IP address is 123.45.56.78. How do I specify the miner's IP address in the firewall rules " Destination and services"? I tried using…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>