hello after configure NAT role i checked firewall live log and see this transaction NAT rule #2 TCP 10.0.1.57 : 62362 → 196.218.167.4 : 3389 [SYN] len=52 ttl=128 tos=0x00…

Hi Everyone, I have question on Sophos firewall and I am new to Sophos appliances. Question/I need to ---> Configure Sophos SG 135 (UTM 9) to allow Microsoft Routing and Remote Access Service (Microsoft RRAS). Customer requirement ---> Microsoft…

Good Morning, Evening or Afternoon I'm playing around with UTM9 for about a week now but I didn't figure out how to allow my synology diskstation to access the internet. I wanted to allow: the system to check for updates and download them, the package…

Hello anyone, I have the following problem: I have a site-to-site IPSec VPN up and running between our SG120 and a customers Cisco ASR Router. However I am not able to get my traffic through the tunnel. The problem is - as I assume - that I was…

Hello, I have installed Sophos UTM Home v9.409-9 on a fanless PC behind an Xfinity Arris Modem/Gateway in DMZ mode and it's working well. I do have a new problem though and am unsure how to best re-configure the UTM and/or the network. I was previously…

So i have no other choice but to post here ans hope for the best. I have Sophos UTM9 on an ESX server at my house and at my buddies business. Both locations are behind a NAT router, my home setup has a ZyWall SUG20 as the main gateway/router. I (so…

Hi! I am not sure the subject line completely express the intent. I have an external network that expects me to connect to their network through two ISPs, A and B. ISP A Our Sophos UTM is hosted within ISP A, and the customer has a tunnel with…

Hi, We have recently implemented sophos UTM 9 as a bridge between our internal LAN and our ISPs router. Our ISP has a hosted firewall and our static IPs are natted from public to private IP address in the hosted firewall. Sophos is up and running…

I am having issues getting Netflix streaming to work. I've read through probably every discussion on the forum, but they appear old and none have worked. Luckily Netflix is not a big percentage of what we watch, but I'm pretty sure it was working until…

Hello together, We are having a SG230 with actual 5 RED 15w Devices to Remote Branch-Offices. This is working fine. Actual we have IP 10.16.0.0/24 on Headquarters and on each Branch Office IP like 10.16.20.0/24. Now, we should integrate an existing…

Hello, I've recently come across a problem that in my eyes makes no sense, I have been trying to get DNAT to work with a new DMZ server. We have an additional server in the DMZ already, fully functioning. I've tried copying every single rule and configuration…

Howdy folks. I have read a few other posts on folks configuring a DNAT for a Plex Media Server behind UTM. I've tried and beat my head against this, but it simply isn't forwarding traffic. What gives!!?!?! I have a network object defined for my Plex…

Hello All, We are migrating to Sophos SG330, I have some doubts because there is not corrispondence between Cisco Asa and Sophos. I would like to permit to our branch offices to communicate each other. We use IPSEC VPN tunnel. I think I should create…

Have a vanilla home network (192.168.1.1 with 24 IPs allotted, don't use all), (2nics intel, several PCs and laptops connected to home network with 2 cisco spa303 voip phones. This is the motherboard supermicro A1SRM-2558F , super fast running over VMware…

Hello Sophos community, I am trying to configure a source NAT for an internal server. I want the server to be known on the outside as one of my additional addresses, like so: LAN_SRV --> Using Any Service --> Going anywhere Translate source…

Hi all, I've just set up and configured my UTM9 Home (Thanks Sophos, really great tool) and it seems to be working fine. I have it configured like this: Home Network ----> ASUS Router -----> Sophos UTM Semi-Transparent Pass Through -------> Sky…

Hi My query is: Can we create two DNAT rules for one HTTPS (443) for a single External IP? Also with the same thing i have done, is create two real webservers, and add them in a single Virtual Web Server. One server is working fine and other is…

I can't locate the original Astaro forum posts about Country Blocking Exceptions not working. Can someone, who knows for sure, confirm if the issue has been resolved in any version? I still cannot get exceptions to work in 9.403-4. Example : Skip…

Hi everyone, Since 2 weeks, an bot's site read my website. Number of connexions grip and website shutdown. I tried to create a rule nat "External IP > Any > My external adress , but it's same. I tried to create rule at firewall : nothing. Everyone…

Hey Guys I have done the following to create a DMZ for a network that I administer. The method of setting it up like this, is keeping the following in mind: # Internal and External networks being able to access the DMZ via special ports # Hosts…

Hi Forum, I have a unusual (I think) query. We are splitting with another organisation and migrating away from their Cisco 6500 to a SG330 UTM. We have our own public IP address range that is routed to the UTM and have setup our own private IP ranges…

Hello Everyone! I have a set of redundant SG310s, I have 2 uplinks to 2 different carriers with a /24 advertised via BGP. I have a subnet setup for DMZ to use these IPs for my phone system and it works just fine, but everything breaks down when…

We have an SG230 in a remote facility which we must make VPN connections to, preferably over L2TP/IPsec. The problem is that they haven't provided us with a public IP per se, instead they have given us a private IP which is 1:1 NATed in their firewall…

Hey everyone, we have an SG 105 on the main branch, network is 192.168.42.x and a RED 15 on a subsidiary branch which is 192.168.9.x The RED serves fine DHCP on 192.168.9.128 until 254. Being on the remote subsidiary, I am able to for example ping…

Hi all, im at the end of all my ideas so im asking for help... I have two sites with UTM, working IPsec tunnel. At point A there is Public WAN IP and thru this interface is reachable also subnet 172.20.60.0 which is kind of "management subnet…