• Firewall policy unable to deploy to some customers: Host \{hostname}\ could not be updated

    Alex Simpson1
    Alex Simpson1
    Hi guys, We have been deploying a firewall policy for a few months now and have noticed that there are a few customer firewalls that are unable to deploy the configuration. They all appear to be getting a similar error to the one pictured below. Can…
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Wifi Router internet goes down if a AD user tries to access internet via a WIFI router whose IP address is added to the Firewall rule allowed list

    Muhammad Safdar
    Muhammad Safdar
    Hi Sophos community, I'm having a issue for my Wireless router. I have created two rules: 1. Rule 1 for AD users to WAN In the above rule internet is allowed once user is authenticated via AD. Everything is working fine. 2. Rule 2 for Wifi router…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Connection between two different subnets

    Qbitter
    Qbitter
    Hi community, I'm trying to connect two different Subnets. This is the environment: Subnet A 192.168.1.0 /24 Gateway: 192.168.1.1 Port 4: Company with DHCP address 192.168.1.55 Device: FritzBox Subnet B 10.0.100.0 /24 Gateway 10.0.100.1 Port…
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • PHYSICAL NETWORK INTERLINKING BETWEEN 2 XGS DEVICES

    TimothyWanume
    TimothyWanume
    Hello guys Fiber Interlink Network 1 should be able to communicate to network 2 through the fiber link Please assist in configuring
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • How to block youtube for a particular IP range in Sophos XG

    Ruka
    Ruka
    Hi everyone, Firstly let me explain the setup i have for my home network Have WAN plugged into a mini PC which runs Sophos XG. On Interface 4 of Mini PC i have plugged in ubiquiti AP from which other devices get wifi connection ( mobile phone , laptop…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Need to Allow trafic from specific AS Number

    Trio Fandi
    Trio Fandi
    Hi, I read this forum discussion (10 months ago) and it was said that this will be a new feature request. Has it available right now ? xg / xgs - allow ip from specific asn number only Thanks.
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • How can I block QUIC without.......

    JohnMMM
    JohnMMM
    Can anyone please tell me (A) How to block all QUIC traffic in and out ,and (B) will that then give me better log reports of url's visited ?. Thanks
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Cant get a simple directly connected network firewall rule working. XGS126

    PeteH
    PeteH
    I am completely stumped by this. I am sure its something obvious that I am overlooking. Lan Port 1 - 192.168.1.254/24 MGMT port 5 - 172.16.0.254/24 I already had a rule saying mgmt subnet source 172.16.0.0 could access lan subnet destination 192…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Any/Any rule still showing Violation in packet capture

    Ben Woolley
    Ben Woolley
    What did I do wrong?
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Update (patch) DMZ linux Server

    Sofos network
    Sofos network
    Hi I have a linux server in the DMZ, and I want to manually patch it from time to time. so I want to open access only during patches then close access to WAN. what are all the rules to put in place. well I'm going to choose the scheduled time tab.
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Two site URLs, 1 public IP, PAT to test server on 443

    Ian McGuinness
    Ian McGuinness
    Port forwarding rule I have an external ip address (PortB:8) currently used for a production website on port 443. I would like to be able to access a test web server via the same public IP via port 65443 and translate to port 443 at the server.…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Forwarding non-standard ssh port to standard ssh port internal (remote SFTP Server)

    Sofos network
    Sofos network
    Hi all, # XG330 I have a project to set up an SFTP server to transfer data securely from a remote station to the SFTP server located in the DMZ.(Head Ofice) the server is installed, configured and integrated into the dmz. the remote client uses an…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • 1 ISP WAN, 18 ISP LAN addresses - how to I setup a port for an edge router to go out ISP LAN IP

    avett1058
    avett1058
    We have 1 WAN IP from our ISP 18 LAN IPs from the ISP Current setup is one CAT6 from ISP to Sophos Firewall. Firewall has the 1 WAN IP interface setup for internet We need a port enabled for on the firewall for a Vendor router to use one of the…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • How do i link a NAT rule to a firewall rule?

    Tomas Z
    Tomas Z
    I created a new rule which allows traffic originating from VPN subnet to the external IP address. I verified in the logs that the traffic passes by unobstructed. Also verified in SSL VPN settings that the particular VPN profile contains that IP address…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Switch and AP6 URL Allow List for XGS Firewall

    Eli
    Eli
    Hello Sophos Team, is there a Documentation on what URLs / IPs need to be in a Firewall Rule for Destination Host? I know the Ports that are needed: HTTPS / NTP / DNS -> Forwarded to Firewall IP and Uplink to DNS Protection Just found a List for…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Firewall Rule Doesn´t Work Сorrectly

    Alex K
    Alex K
    Good afternoon I work at Virtual Box. I have three virtual machines. The first is the Sophos firewall, the second is the Windows 10 client. And on the third I have an Ubuntu server. The task is to block traffic from the Windows 10 client to the Ubunu…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Port 113

    midnightSun
    midnightSun
    Sooo when scanning the system i've noticed 113 is the only port showing as closed / reject. Since the other ports are Drop I've created a rule to drop 113 from all connections but SFOS isn't honoring the rule. Why? Why would they decided to reject only…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Ports blocking on LAN zone.

    Alex KABWE
    Alex KABWE
    Hello dear all, I'm connected with one of my clients via LAN, without going to the internet, just a LAN to LAN connection to have access to their server. But the port open to receive SNMP traffic is blocked from time to time, and I no longer receive…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • XGS126 and Blink Cameras

    Michael Witmer
    Michael Witmer
    Setting up Blink Cameras and the XGS126 is blocking communication with the Blink Servers. Have updated the policy to allow 554, 443 and 80 for the camera's IP Group but still no go. Anyone else got this to work ??
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Internet stop every day on same time on Sophos XG135

    Tihomir Trifonov
    Tihomir Trifonov
    Hello, we have a problem with our client where we put Sophos XG135 with latest update 20.0.0 on their network, like every day at the same time somewhere around 12:30-1pm and in the evening around 7-8pm, the internet stops but Sophos continues to work…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Rule change not applied unless restart.

    midnightSun
    midnightSun
    I'm having to restart this system to get Firewall / NAT rules enforced when changes are applied. This seems to happen with quite a few people in the community. I've found sometimes disabling the firewall rule that feeds a NAT rule loads the additions…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • I already added the server port and created the rule but I get this error.

    Patricio Gómez
    Patricio Gómez
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • making traffic bypass firewall NAT and go straight out to WAN

    Sophos User1175
    Sophos User1175
    hi all, so on our sophos FW i have set up two SD Wans as we have 2 Wans, one for our main network (wan1) and another for our guest network (wan2) as we wanted them separated so there using different public ip addresses problem is i have a laptop going…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • How to open to internet for airgap sophos xg firewall>

    Si Ta
    Si Ta
    I like to open the internet access on the firewall. My Firewall is set up as airgap device. One laptop is connected to it to access the web console of the firewall. That laptop can access to the internet. Could you advice me how can I configured my…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Port 80 and 443 open from external if using external IP address. Support says it goes to first rule that matches the port and ignores host name???

    AllanD
    AllanD
    We just had a PCI compliance scan and we failed because HTST wasn't enabled. Looking through everything HTST is enabled on all of our Web Server Protection rules including the default one. The PCI scanning company said the server replying is using apache…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>