Hi, Can DNS Spoofing be detected.

I recently added Pi-hole as the DNS server for Sophos XG itself, and I’ve noticed in my Pi-hole logs that Sophos XG is making a significant amount of DNS queries to various google.x addresses, such as google.de, google.com.pr, google.to, google.com.af…

Hello all, I am currently trying to configure Sophos xg to replace my Fritzbox. From problems with certificates, I have become aware that my DNS resolution for internal hosts and the xg itself is not working. Currently I have only a test client, which…

Wr have a brand new XG86w that we are connecting to Comcast. The comcast modem is in basic bridge mode. The problem is that about every 10 minutes DNS fails. We cannot ping anything from the firewall. I have tried comcast default DNS, Google DNS and OpenDNS…

I'm looking to use the built-in DHCP and DNS server on the Sophos XG on my "Main VLAN" but I don't want other VLANs to be able to do any nslookups for the host entrys. Today VLAN1 has it's own DHCP and DNS server and the other VLANs uses the Sophos…

we hosted the server on IIS in the internal network and I assigned a domain name like app.example.com but the problem is while trying to access from outside the network using domain name(app.example.com) the website has not loading but while trying…

Running XG 18.0 MR5-Build586 on a pair of SG230's in HA (Active-Passive). We use the XG as a local cache and DNS relay, since we rely on AD DNS hosted in our AWS Virtual Private Cloud. We have DNS request routing setup so that only internal domains are…

As a quick background, I have been working with firewalls for about 15 years (Cisco PIX, Cisco ASA, and recently SonicWall TZ and NSa). I have been working on and off with Sophos XGs for about 2 years now so I am familiar with them but they are definitely…

I am using XG210 (SFOS 18.0.5 MR-5-Build586) and Sophos Connect 2.1.20. SSL VPN and IPSEC VPN for Remote Access is configured as "use as default gateway" forcing all remote traffic through the XG. Remote users are able to access LAN resources, that…

Sophos XG106 (SFOS 18.0.5 MR-5-Build586) I have set up several own DNS servers and added them to XG DNS settings. XG DHCP service provides those DNS servers to our clients. Clients are separated in different zones, all with their own WAN rule and…

Currently, I have a Site-to-Site VPN, with split tunnels to specific IP's and networks, setup on both Sophos firewalls and they are working fine. BIGGEST THING TO REMEMBER , the branch office needs to have their computers on our internal Domain. The…

Hello, We want our lan users to not be able to change their dns settings on their computers or browsers to use other dns services available on the web. We want to only allow access to these two dns servers : 208.67.222.222 and 208.67.220.220 (these…

Having issues resolving LAN devices. The Sophos Connect clients have proper DNS servers assigned, and reflected in connection. DNS device access is allowed for VPN zone. No remote devices will resolve, NSLOOKUP example: *** UnKnown can't find…

Hello ! Can someone support me in a “weird” issue please ? Problem : The Sophos XG135 is not returning any DNS name resolution if we don’t “reconnect” the RJ45 cable. When any PC on Windows 10 boots, they cannot access the DNS server which is our…

Hello...We have an XG firewall configured with (2) WAN interfaces. The primary is a cable connection from COX. We have a second one configured as a Backup in the WAN link manager that is pointing to a CradlePoint router with a Cellular SIM installed.…

Hello Community, i have a problem. on my xg i have 2 Networks: 1. 172.20.10.x (Default LAN) 2. 172.20.8.x (VLAN8) Both have his own DNS Server: 172.20.10.x --> DHCP with DNS 172.20.10.1 172.20.8.x --> DHCP with DNS 172.20.8.1 i added all…

Hi, my question relates to this older discussion, which left the problem unsolved: https://community.sophos.com/sophos-xg-firewall/f/discussions/123391/constant-dns-lookups-for-google-domains * I have directed the sophos xg to use my pihole as…

We just received an alert from an upstream SG UTM Firewall that the downstream XG firewall was blocked by SG due to ATP. This is DNS traffic towards namecheap DNS servers. Probably for for718-whileteam__heldlead__com (__ is a dot .) 2021:04:09-13…

Since I switched from the sg135 to the xg135, Websites build up very slowly. As DNS, I use my local DNS-Server. Here is my firewall-rule LANtoWAN:

Hi I have a problem with DNS resolving. I have one lan network which is 192.168.0.1/24 and another wifi network that has 192.168.100.1/24. I have a WIN 10 PC with IP 192.168.0.105 on which there is a HYPE-V WIN 10 PC with ip 192.168.0.151. On this …

Hello, I have a user who is utilizing the Sophos XG 86w firewall for a home office. They way it is set up has her home internet split to allow her work network as well as her home network. She connects to the networks via wireless. So she has an SSID…

Hi, I have a strange problem with DNS: When DNS server is set to an external server, the FW can´t resolve any name -> Networking -> Zones -> "my Zone" -> DNS is checked -> Networking -> DNS -> static -> DNS1: 1.1.1.1 -> Firewallrule any/any (for…

Hi, I have installed the Sophos XG Home editon to be used as central firewall. First of all, for the moment everthing works fine. But what I can't belive is, this firewall alone creates per hour 3000 DNS request, for any google, yahoo and some other…

DNS lookup started failing today but only for one website. Results return as 0.0.0.0 and page loads in browser report DNS_PROBE_FINISHED_NXDOMAIN Compare the results of a DNS lookup against router vs. against the external DNS server directly: ipconfig…

Hi, I am using Sohos XG, version SFOS 18.0.4 MR-4. It seems the way I configured DNS doesn't work for reverse DNS lookup of the firewall software itself. Please see attached screenshot. My DNS configuration looks as follows: -All clients use Sophos…