I'm trying to get away from setting IP reservations and static DNS entries as it's just a waste of time. I want to just use internal hostnames for a variety of automation stuff. I've set a .local domain for all of my DHCP scopes (three) so I should…

Hi, I've set up a new VLAN (20) bound to the LAN hardware (Port1.20) with IP 192.168.20.1, and assigned it to the DMZ zone. If I run the policy checker using Firewall,SSL/TLS and web method, with the following parameters, it fails URL: dns://192.168…

Every time FQDN hosts object is being added to firewall it causes dnscache to restart. During restart name resolution using firewall fails. New FQDN host object being added to firewall, notice how PID changes for dnscache process. Instead of reloading…

Dear one query, I do not have an internal DNS server to resolve my zimbra internally, I have searched for a DNS service in sophos, I have added the FQDN and internal IP but it does not resolve, does anyone know how said DNS service is applied?

Google searching not successful; how do I set up the DHCP server "dns settings" to push from an XG to a remote Red60 (i.e. client laptop needs to see our domain suffix + name servers)

Are there any plans for Sophos XG to implement DNS sinkholing where malicious DNS requests are resolved to a "Black Holed" IP address and once a host tries to communicate with this IP address, we can identify the infected host. This would save a hugh…

I recently updated to SFOS 19.0.1 MR-1-Build365. Since the update my DNS host entries aren't working on all VLANs except the VLAN the firewall is connected to. They were previously working in 18.5 and I haven't made any configuration changes. I have…

Hi all, we have the following setup: - XGS 126, configured for SSLVPN - The global SSLVPN settings contain the IPs for both internal AD DNS servers and the AD FQDN (i.e. contoso.local) - The internal DNS is configured for Split-DNS to resolve external…

Hi, Please forgive this question. I am a complete novice so not sure even if this is possible. My situation: I have one server with a static IP On this server I have various web applications that are being served on different ports. Ie: Service 1…

Hello, I need to see the DNS queries generated from my LAN zone to the WAN zone of the XG Firewall. Through the DHCP of the firewall I am assigning the same Firewall as the DNS server. But I cannot identify or find anything in the logs or reports that…

Greetings everyone! I'm going to replace my UTM tonight with my new XGS136. Our domain controller will be primary DNS, and the XGS will be secondary. On the domain controller I set the forwarder to be the firewall. These are my settings. Have I set…

Hello All, I'm switching over to an XG firewall, and I can't get my Domain Controllers' DNS to resolve their forwarders. I can see the packets being allowed out and seem to have upstream bandwidth, but in Live Connections under DNS the downstream…

I have a Sophos XG 85 v17 with a site-to-site vpn running to a Ubiquiti UDM Pro. The tunnel is working great despite DNS not resolving from either end through the tunnel. The XG subnet is 10.10.10.0/24 and the Ubiquiti subnet is 10.0.0.0/24. I can ping…

Hey, So I have this DHCP VLANS all like this and DNS like this From any computer in VLAN 100 I can ping another computer in VLAN100 like this ping cws-yellow-room But, if I try to ping a server (by name and not…

Hi, I have a question about Web content filtering using either Web proxy or DPI-SSL and DNS requests/resolution. I have Sophos firewall set up in bridge mode with Netgear router as the gateway and for DNS. The Netgear router handles DHCP and DNS…

Hi! Recently I implemented my Sophos XG as local DNS server, but it does not resolve public DNS names. My setup is that I have some router working as DHCP server. Sophos is "work in progress", with WAN interface on the same subnet as router. It also…

Hi, I got a Remote Access IPSEC working on an XGS2300 (v19). It worked but was unusably slow. Sophos support suggested I disable "Use as default gateway" and explicitely add resources VPN clients could see. I want them to see the entire LAN, and the…

Hi In my network environment, i am noticing a lot of TCP Latency and DNS retry issues. Currently i am using Unifi Switches and Unifi APs as network devices and they channel the traffic to the XG-115. I have reached out to Unifi support team to see…

Hi guys, I am using a Sophos XG v19 as gateway and try to connect via SSL VPN from a Linux notebook. I configured the SSL VPN as in the sophos own video-tutorial and I found some other tutorials showing the same steps. When I try to connect from…

Hello, I think i'm stupid. When i connect with the Sophos SSL VPN client and if I then try to access my NAS via DNS names, it is not found. If I \\myNAS. use it works. nslookup has a DNS request timed out, but he resolves it. Can someone tell me how…

We have a ongoing issue with Sophos Connect 2.0 and IPSec VPN connections where DNS resolution is extremely slow at first and sometimes never resolves itself. For example a user connects to the VPN and then tries to open a network drive then gets a error…

Hi, We have the Sophos XG and XGS UTMs behind an other firewall (not controlled by us). However the admin of that other firewall complains about a lot of DNS traffic coming from our Sophos. we tried dropping any DNS traffic from within the Sophos and…

Hello all I want to create NAT + Access rules for DNS and NTP so any UDP 53 and UDP 123 traffic targetted for WAN gets redirected to internal servers. Can anyone suggest how that can be achieved? Thanks A

We have moved over a customer from SSL vpn to IPSEC connect client vpn but now when they use the built in VPN on an Apple iphone it looks like they arent receiving the DNS server IP that is specified in the IPSEC remote access section on the Sophos XG…

I have my XG106 with v19 GA behind my XG125 with v18.5.2 MR2 for home testing. The only thing connected to the XG106 is the WAN link which feeds into a port on the XG125. The strange thing is I see in the XG125 logs is that the XG106 is making multiple…