So here is the deal - I have an entire network of devices (switches, APs, computers, laptops, servers, printers, IoTs) that was all built on a /16 subnet using public IP space and it is all just using default VLAN/VLAN 1. 176.100.x.x/16. It is slow…

Hi, I have the the following setup: Office FW (10.1.0.0/24) <==Policy based ipsec==> DC FW (LAN: 10.2.0.0/24; SSL-VPN: 10.3.0.0/24) <==Route based ipsec==> Partner FW (172.20.32.0/24) I try to announce the routes for the office (10.1.0.0/24),…

Hi I try to setup a virtual sophos as firewall (SFOS 19.5) for my VM in a private vlan et also give access to remote user/site using vpn version :proxmox 7 eno1 -> vmbr0 (public IP as management on ovh infrastructure) eno2 (connected to the vrack service…

Hello, hope all of you are ok. I need help with something. I have 2 sophos, XG310 and XG210, on firmware 19.5.0. Both are in a buildings complex and share a LAN segment. One has GW 10.10.10.1, now Sophos 1 and the other one has GW 10.10.10.2 now Sophos…

Hi Team, We encountered a problem wherein customer needs the following: 1. Head Office will route their internet connection to Branch Office once they experience no internet on the site. 2. Vice versa, Branch office should route their internet connection…

Good day Team l have just deployed a firewall XGS 2300 The network has 5 branches which are connected using GRE Tunnels. The communication from branches to HQ is working fine. We have a problem with the communication from one branch office to another…

Hi Guys, This is our network setup. We have couple of websites and Microsoft Direct Access server sitting on our LAN to access resources from outside . Currently we have PFSence box and all working without any issue. With Sophos no luck. I appreciate…

Since upgrading the firmware version, a couple of devices have been blocked from sending traffic between the subnet 192.168.1.0 and 192.168.2.0. I have set up rules to allow traffic to and from the devices but still unable to ping. the device in…

Hello Everybody I have a new problem with my installed Sophos Firewall Firewall XG115 (SFOS 19.0.1 MR-1-Build365) LAN Subnet:192.168.200.0 Mask:255.255.255.0 GW:192.168.200.1 VLAN 10.20.1.0 Mask:255.255.255.0 GW:10.20.1.1 To be able to configure…

Hi all, I am in the optics and the reflection to start the project of segmentation of my local network. i have xg 330 as edge firewall Si i think about to methods, go with L3 switch for inter-vlan routing or don't make L3 switch and do all the segmentation…

SCENARIO : Sophos firewall IP : 192.168.177.254 Vodafone Router IP : 192.168.80.1 - Internet How do i configure vodafone on sophos in other to get the public IP to use for my VPN connection.

So I have SSL VPN setup and working. I need to know if there is a way to create specific routes for VPN traffic. We have an internal application that resolves to a Public Range, but our internal router has a route statement to send that instead to an…

Hi there, can someone please tell me where I can find the equivalent of Zyxel's Policy Route

Hello, I have this network architecture , And my goal is that the VLAN100 (with Network IP : 192.168.123.0/24) to have access on my Server 172.20.24.24 So , I create this Route on my Sophos Firewall ( version XG S3300 firmeware 19.0…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Log Viewer Firewall (Invalid…

Hello Everyone, one of our customers has a phone system (Panasonic KX-NS700) that uses multicast to synchronize the Cell-Stations (KX-NS0154). The Cell-Stations (DECT) use PTP for synchronisation.There is one Master and several Slave-Stations. Although…

Good morning everyone, i'm trying to implement BGP over RBVPN, neighbors are up only when i add the comand disable-connected-check and if i use the comand maximu-path 20 they cannot establish, any advise? Also with the comand disable-connected-check both…

Hello everyone, How do i create a static route pointing to null0? I need that route to be a summary route so i can advertise it in bgp. Many Thanks, Dragos

We have 3 internet links; I want to route the web-based system (URL) through one of the WAN links. Please advice on how the routing should be configured. Whenever the user click on the link, it has to point to the dedicated WAN link.

Hello Team, We recently acquired XGS 3300 to replace an ASA cisco firewall. Configurations were done as follows: Sophos XGS 3300 : - Two public IPs were created on the interfaces with the intention of one handling the VPN traffic and the other…

I have 2 XGS "A" and XGS "B", connected by a Site to Site IPSEC tunnel. Connections work fine. Now i have to have access to a network at "B" by a Remote-VPN connection at "A" Remote-VPN => "A" <=> "B" The vurtuell network of the Remote …

I've got a strange one. I've deployed Azure "out of the box" following this doc: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122504/xg-firewall-on-azure-how-to-deploy From the VM, I can ping the Sophos device, but I can…

We have a location where we have Sophos XG106 Firewall serving as Gateway. We have one MPLS link on the location. We are facing issue when we shift / redirect traffic on MPLS link to connect to HO. Static routes are working fine. We are able to reach…

Hi, we have a client, We created a VLAN on a MPLS VPN for a site branch to access the internet from the head office. We have two branches connected under the same VLAN ID. the other one is working successfully, but the other branch is connected but…

Hello, I'm stuck on a LAN routing problem. We changed our UTM firewall to XGS116, I recreated the rules and configuration on the new firewall, but I have a problem with the incoming traffic to the internal network. We have several offices that are interconnected…