Dear all experts, Not sure whether am i in the correct place to ask this question. As below diagram, i have a layer 2 Switch (Switch A) connected to the XG 135 firewall. My boss has got another layer 2 Switch (Switch B), he intended to create…

Hello I am a home user with a big family and an IT person who likes to play with technology own site https://brokescholar.com/ I stumbled on Sophos because I wanted something with good DPi and Web filtering. I ended up installing Sophos XG 18 and…

We have 3 lines Line A: - has a fixed public Ip - is needed for authentication with MS services (Exchange365 and others). Certain requests to MS have to be initiated over this fixed Ip - is part of a VPN - has the lowest bandwidth Line B and C - have…

Hello, short question. I am fairly new to Sophos XG. I come from Sonicwalls and I am trying to enter a normal route where traffic from Any source going to LAN 192.168.1.0/24 should go through a certain gateway (Coreswitch). The normal static routing…

Im using XG Xtream SFOS 18.0.4 MR-4.I've successfully configured site-to-site IPsec tunnel. Im able to ping other no issue. Now i want to know how i can route specific websites over the tunnel to other point. Like facebook, Google and Instagram traffic…

Hi, I am running IP-sec s2s vpn between branch(Sophos- CR25ING, XG v17.5 ) to HQ (Palo Alto-5220), vpn established and working fine. for better security and filter, we need all traffic should be routed through HQ, how can we achieve this? I have…

I am working on a project and was wondering if it is possible to create Sophos IPsec Tunnel interface to connect to Azure VPN tunnel interface. Basically Route based VPN to azure.

Hi all, we have couple XGs in place (18.3 and 18.4). Each with multiple WAN lines and each line has different IPs. When using Mail on XG: How to restrict mail traffic (In- and outbound) to dedicated Lines and IPs? Thanks for hints Gernot

Hey there, I set up two VLANs. VLAN 3 and VLAN 4. I can ping the gateway for both of the IPs, but can't ping all the IPs on them from the main subnet on the interface that the VLANs were created on. The difference is, the gateway and cisco switch everything…

Hello Community, I have a strange problem. I have a successfully established IPsec connection between an UTM and a XG firewall. Both products have the latest firmware: UTM with 9.705-3 and the XG with SFOS 18.0.3 MR-3. The IPsec connection is established…

Hello all, I currently have the problem that I cannot use streams behind a Sophos XG. The stream breaks again and again. In use is a Sophos XG v17.5 Multicast is set up, but if this is correct I can not say. I used this article: support.sophos.com…

Hello Everyone. I hope you can help in providing internet access to my network on my new SOPHOS XG86W. Currently it cannot reach the registration server to sync its registration and any clients connected to the LAN or WiFi can ping external addresses…

Hi may I know once I set up the XG 430 HA and how to connect to the redundant core switch (Stacking Netgear) , thank you. etc: create 2 lan ports and assign IP to each core switch?

Hello Forum! I have a little challenge here. TLTR: Translating WAN IPv6 to LAN IPv4. I would like to make various services accessible via IPv4 and IPv6 from the WAN side. Internally in the LAN and DMZ I would like to continue working only with IPv4…

Hi Guys, I'm starting to learn Sophos XG and stumble upon this two images below. I would appreciate if someone help me visualize the said pictures since I'm having a hard time understanding it a (a high level diagram maybe?). Also I'm a little bit confuse…

Hi Guys Hoping someone can help me as I'm struggling a bit with V18 and the decoupling of NAT rules. I know it works as its working on V17 without issue. We have a vlan and within that vlan there is a device which requires WAN access. I have created…

Hello All, I tried to achieve something with Sophos, after going thru available KBs. I've a MPLS link (with BGP) and ILL at a location. ILL is terminated on Sophos and I've created IPSec Tunnel, in event of MPLS down, I shift the traffic on IPSec…

Good day! I am having to setup a new network for an IP based phone system our organization does not control. The system needs to work over the IPSec tunnel between two sites running Sophos XGs. Because we don't have access control over the system, we…

I'll try to explain my setup first, and then explain what I am trying to achieve. So I have two VLANs which are: PC Range (VLAN1): 172.16.0.0/16 Telephone Range (VLAN 122): 172.18.0.0/20 Both ranges can communicate with each other and our core switches…

Hi all, we are moving from a departement to another. Therefore a Site2Site Tunnel with overlapping networks are planned (using that howto: https://support.sophos.com/support/s/article/KB-000035848?language=en_US ) for the duration of the users…

Hello all, This is my WAN link configuration: The main interface has no IP address. but I created a VLAN on WAN interface and also add 2 alias valid IP address. I created 2 NAT policies for rules. all rules working fine and users have access to…

Hi, I'm having an issue at a location with a new XG firewall that I'm wondering if anyone has run into... The firewall is behind a cable modem, with a web server plugged into the modem. The web server has a static IP assigned. Let's call this x.x…

We have a Sophos XG 210 running SFOS 18.0.3 MR3. We have two WAN connections, and two different LAN networks. We are using SD-WAN Routing to ensure outbound traffic from LAN1 is routed out WAN1, and outbound traffic from LAN2 is routed out WAN2. The problem…

We have a DMZ subnet off of our XG 550. When our internet connection goes down, internal clients cannot get to the web servers located on that DMZ. If you do a tracert, it is attempting to send the traffic out the other internet connection and get to…

Hi everyone, I know the question may not be clear but here it is. I have managed to get connectivity between the branch and HQ. I can ping and access devices on both sides. The issue is, when VLAN551, which is the data vlan, is on WAN, the cisco…