For logistic reasons I have configured TWO DISTINCT Sophos UTM on my company: SOPHOS UTM1 (servers): - Internal network 172.16.11.111 (internet DNS server, File server, etc.) - DMZ1 (Internet authoritative DNS servers) - DMZ2 (FTP servers) …

Hello UTMers! Quick question for the geniuses here (I'm talking to you balfson!): What is the proper design of a country code exception that allows SMTP inbound and outbound from all countries? I have seen a bunch of posts on these forums...some say…

Dear all My provider recently enabled IPTV over Multicast. I did try it make it available on my network using Sophos UTMs PIM-SIM. I have worked out all messages on the firewall (IGMP Blocking) and PIM-SIM logs: it seems to connect to the RP. .. but…

I have my Cisco switch with all my vlans configured and routing working. Now I plan to add a Sophos utm firewall, and will use its ip as the next hop on the Cisco. my question is, with this setup, can the firewall rules on the utm have any affect on…

We have got the following situation: we want to redirect multiple dns hosts to a single ip adres. For example: External dns record https://test1.companyname.com redirects to 123.123.123.1 In the firewall i want https://test1.companyname.com redirected…

Hi there, I have a testbed with a Sophos UTM where there are two networks connected (each on a interface of the UTM). N1: 192.168.1.0/24 (UTM IP: 192.168.1.1) N2: 192.168.2.0/24 (UTM IP: 192.168.2.1) As both networks are known to the UTM, there…

Hello. I have a "simple" issue: i need to build two ipsec tunnels in which the destination is the same subnet, so my question is about the route precedence in case i make a more narrow tunnel(or even a host tunnel) on one side to solve this. for…

Resetted and installed SG105 with latest UTM setup allow all traffic with setup wizard WAN is behind DSL-Router Zyxel Speedlink 5501, on which there is a firewall running, direct connected PC works fine PC connected to LAN and WAN to the DSL-Router…

Good Morning, i have cluster UTM SG310 with firmware version 9.509-3 WAN IP IS: 1.2.3.4 Additional Address: 1.2.3.5 Internal LAN: 192.168.0.100 MPLS Gateway: 192.168.0.15 Web Server: 192.168.5.19 (Under MPLS) Static Routing configured on…

The main network for the entire organization is 192.168. 168 .x That is VLAN 168 There is a management network on network 192.168. 150 .x That is VLAN 150 Members of the IT Group have workstations on the 168 network (as do all other computers…

We using the UTM on a public IP-address block of 4 adresses. This IP-addresses are assinged to 1 interface (I call it interface1 for now) 1 address isthe default interface address and the others are addtional adresses. This interfaces also contains the…

Hello All! Does anyone know why a SNAT rule needs to be configured for Radius when sending the traffic over a IPsec connection? To my understanding IPsec should simply encapsulate the packet and send it out the of the WAN interface with a destination…

Hi, I have 2 internet connections, 1 is business, 1 is home. Both are plugged into the UTM on different interfaces. I have 2 internal networks, 10.0.0.x and 10.150.0.x. - The 10.150.0.x uses the business connection (static IP) for servers, etc. The…

Hi All, Having two different channels (2 contracts and 2 routers) for line data services, would it be possible to interface the two routers on the UTM (i.e. eth1,eth2) , and manage two independent Wi-Fi lines ? At the moment I’ve configurated the first…

Hi to all I am in process of redesign of my home network to adding UTM to équation. All device are managed with 10gbe (fiber) or 1gbe connection (RJ45) I'm connected with FFTH, bandwidth is 100 Mbps upload/download, but it can be possible to upgrade…

Basically, i installed Sophos UTM Home onto my UTM220, and followed the basic setup, however after this when i added extra Ethernet interfaces in "interfaces" they wouldn't work. To be honest i dont understand how to setup the firewall, and i need help…

Hi, I have configured a few subnets in my utm. In my "internal" subnet (192.168.2.0/24) a chromecast is connected. How do I need to configure my utm, that clients from the second subnet (192.168.221.0/24) can connect to the Chromecast? Any ideas…

I currently have two WAN connections from two seperate providers each providing a seperate connection to the internet. WAN 1 = Default Gateway WAN 2 = No Gateway Defined Two Internal Networks Internal Network 1 = uses Wan 1 to browse the web…

Hello Completley new here aswell as my knowledge of sophos UTM 9 SG! Unable to download programs such as some drivers but mainly programs. Log file is full of it I am using the Home Edition NFA SG UTM 9. Did some research about my problem…

I have set up an ipSEC tunnel between our on-prem UTM 9 device and Microsoft Azure. The plan is to have a server in Azure that must be accessible from the local network. However, I can't ping the server from the on-prem network, Pinging from VM on the…

Hi, I am hoping this is a simple solve. 2 issues: Client A is unable to get a DHCP address from the DHCP Server. Sophos cannot PING DHCP Server using eth4 Interface. However setting a STATIC IP on Client A allows communication to DHCP…

Hi, I have 2 external interfaces: a) WAN b) VPN concentrator I have my static routing configured correctly to route traffic accordingly. Basically everything goes to a) except for some stuff, which goes to b) (a couple of specific networks). …

I have going over this in my head for weeks and browsing all over on the forums for an answer and I cannot find or am just not searching right or something. We have a /24 from ARIN (got one of the last ones) that I need to come to my UTM. Here is what…

Hello, we have the following Problem: We use the option "Optional: Interface for Outgoing traffic" for our WebProtection Profiles, so different customers can browse websites with different public IPs. If we want to connect to an internal web-server…

Hello, I having a stange issue in my company actually we do MAC address filtering all PC on the SOPHOS Firewall is in a specific user VLAN with 2 autorised MAC address ( 1 LAN and 1 WLAN ) and 1 reserved IP. In the network we have Windows, Archlinux…