i have dns domain server 10.0.0.1 mask 255.0.0.0 gateway 10.0.0.2 & and ip range is 10.0.0.1 to 10.0.0.254 but now i want to give different ip range to different department like 10.0.1.1 to 10.0.1.254 to support department and 10.0.2.1 to 10.0.2.254 for…

Hello All, We have a setup in which Sophos Firewall acts a hosted filter (VMware). Sophos Firewall acts as a central filter for 10 + sites - i.e internet traffic from 10 sites has to pass through central filter. We have a plan to move sites to serverless…

Good morning everyone, on sophos XGS I configured the client-site SSL VPN, everything works except the resolution of internal names, probably because our internal windows domain has the same name as a public domain that is not ours (I know it's a bad…

Hello, I am using Sophos XGS 3100 UTM device. For about 5-6 months, a DNS query has been made to lookingprovide.com every day and every hour of the day. Sophos ATP blocks this query (C2/Generic-A). When I examine the log records, I see that the source…

Environment: Windows server only Central office with remote offices Each Remote office has DC with DHCP and DNS with it's own Sophos firewall. Each Firewall has connection back to central office firewall We recently had to change IP Schema. The issue…

Hello! I have a need for configuration that has never been necessary before. I have remote users using SSL VPN. In my global SSL VPN settings I give my two internal DNS servers and also the company domain so that name resolution for internal services…

Hi folks, this morning while testing some DNS issues, I changed the WAN interface DNS setting from manual to use DHCP, I refreshed the interface which was reported by the XG as the IP4 component down then up. I tested the settings by using the diagnostic…

Hi All, I'm getting hostname resolution failures from docker containers for local DNS records; they seem unable to handle a rather strange response from the Sophos Firewall DNS service. As far as I can tell, the problem is that the DNS server returns…

With using the XG as DNS responder, is there a logfile that is recording the requests? By looking at Log file details - Sophos Firewall none of those files contain the actual logging of the requests and respondses.

Hi all, here is my environment: HQ-------- FW XG AD | DNS SERVER Wbeserver: app.domain.corp BO: (Workgroup)--------- FW XGS: DNS|DHCP|GW There's Site To site IPSec config between HQ and BO . I need to configure "conditionnal forwarder…

Hi; We have a large server farm behind sophos firewall. There are different domain name AD servers available. I can authenticate users over ADs with these different domains. I can also use AD authentication on SSL VPN connections. No problem till this…

Hi I have a clients XGS87, and the users cannot connect to office 365 for email. When I use policy tester with the url, I get error device could not resolve the url, please update url and try again. When I go to DNS and test the name lookup, it is…

Hello everyone. I have 2 XGS Firewalls connected via SSL Site2Site VPN, which works good. I created a DNS Request Route for contoso.com (changed of course to my setup) to go to DC DNS IP in main office. This worked for quite some time, now it does…

If I want to made DNS Sinkholing. Do I need any license or I can do without license?

VPN is working fine IP-wise. I can ping all the servers do RDP, the whole shebang. However when I try to ping *.mydomain.local from the HO VPN network I get the message that it couldn't be resolved. I configured DNS-requests routes in both appliances…

I've successfully configured our XG Firewalls to push logs to our SIEM solution which works well, though when trying to trace source of DNS requests I can't find anything logged either locally on the XG, or anything on the SIEM other than a UDP port 53…

Hi, I have recently tried to upgrade one of our Sophos XG430 to 19.5 from SFOS 19.0.1 MR-1-Build365 but had to immediately roll it back due to issues. The issues were that we could no longer browse to other network devices via DNS name, we have to…

HOla! tengo un problema y a ver si alguien le ha pasado lo mismo y como puedo solucionarlo. Tengo un DC con DNS "pepito.local" donde tengo un servidor Web publicado al exterior por el dns https://CRM.pepito.com . En la zona LOCAL tengo creada…

Hi, I have a user using SSL VPN (Remote Access) to connect to the office. This worked good over the last months, but we're now having strange issues: After a short ( but undefined) period of time, he's unable to access any internal web resources…

I'm trying to setup DNS Request Route to a DNS server on AWS. Situation is similar to the below but I'm using Sophos Firewall instead of UTM. For SNAT on the Sophos Firewall, I can't seem to use a subnet so can't test the resolution that is mentioned…

Greetings guys, Hope you all doing well, I'm running Sophos XG 85 and 105 at: XG105 (SFOS 17.5.17 MR-17-Build837) XG85 (SFOS 17.5.17 MR-17-Build837) I have multiple network environments where I use Sophos Firewalls XG 85 and 105. When I try…

Good day everyone! I am currently implementing an emergency firewall ruleset, which looks like this: - Allow all communications towards sophos central (for Live Response etc. to work) - Allow all communications coming from the physical Management…

Hello everyone, I need to get some SSL VPN users to a server with a local URL ("">">http://myurl.local"). The steps I followed: 1) My Xgs2300 has the two domain controllers and google's dns as its dns server 2) Configured a VPN policy only for these users…

I had this working in Untangle for years, then switched to OPNsense for a few weeks and got it working, now I've decided to go with Sophos but I'm stuck. (Loving Sophos XG, btw.) I have two PiHoles running on my LAN and want to force/redirect all…

We have two VLANs which are isolated from the rest of our network. They use external DNS for lookups. When the user hits a content issue, they are redirected to the firewall captive portal. However, because they use the external DNS they are pointed to…