• IPv6 Country Block WAN to LAN strangeness

    Casual_User
    Casual_User
    Hello, Since the XG Firewall does not have countries for IPv6, I have created my own countries based on published IPv6 address ranges which can be found here https://www.ipdeny.com/ I created a LAN to WAN rule to block access to a country and a WAN…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Lots of discarded IPv6 packets in firewall log.

    JohnHilton
    JohnHilton
    Hi all, Started to have this issue the last day in the office 30mins before i left for the weekend. Basically our network has been going very slow and i have lots of this in the firewall..... like non stop. Am i right to believe fe80: is internally…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • IPV6 and IPV4 VPN full tunneling

    Reem Jalal Eddine
    Reem Jalal Eddine
    Hi, I have forced a rule where users has to vpn no matter what when they are outside our network domain. I was able to perform a file provisioning that auto connect users to VPN, however I still have one issue is that sometimes, before connecting…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • IPv6 PD and v20.0.2 MR-2

    rfcat_vk
    rfcat_vk
    Hi folks, a couple of days ago my network was downgraded/upgraded from 1000/50 to 250/100, all very good. The IP4 address is now static assigned by the RSP DHCP servers. After a number attempts for over an hour and logging a fault with the RSP, investigation…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • IPv6 Gateway constantly failing

    LHerzog
    LHerzog
    I need some help to understand why this firewalls IPv6 gateway is constantly reported as failed. It's XGS126 with SFOS 20.0.1 Because of that Gateway errors I reconfigured it from being an active gateway to a backup failover gateway only. I have…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Route IPv6 to DMZ

    pgross
    pgross
    Hi there, we have a /64 subnet (with gateway) and a /56 assigned by the ISP. No PD in place. I've assigned an address from the /64 subnet together with the gateway to the WAN interface, which is now reachable via IPv6. I'd like to assign IPv6 Addresses…
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • SFOS 20 IPV6 over PPPoE

    CA VAN LOGGERENBERG​
    CA VAN LOGGERENBERG​
    When will ipv6 be supported over PPPoE ? When I use any other router / firewall I am able to get IPv6 over PPPoE just not via Sophos
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • IPv6 - possible to configure the link-local-address (to fe80::1 for example) ?

    dirkkotte
    dirkkotte
    In the IPv6 training, a manually configured IPv6 link-local address for the gateway was considered "best practice". fe80::1 would be a good choice... Is it possible to configure this with sophos firewall? ...or why this should not be done? thx in a…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Site2Site IPSec VPN with both endpoints only IPv6

    Björn Bendix
    Björn Bendix
    Hello, I want to setup a S2S IPsec VPN between our Head office and Branch Office. The branch office has only IPv6. I have setup on btoh side the S2S VPN, but i cant get it to connect. And i even dont see any connection trys in the logs. For all other…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Connect 2.3 with disabled IPv6 component

    Quallensaft
    Quallensaft
    - upgraded our Windows Connect Clients from 2.2.9 to 2.3 - when now connecting with SSL VPN: The client is connected (all is working) but the state in Sophos Connect will not switch to connected and stays in "is connecting"... -> not possible to disconnect…
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • IPv6 enviroment on XGS

    Quallensaft
    Quallensaft
    Kinda stupid question: Is there any "how-to doc" to setup a simple IPv6 dual-stack enviroment on XGS? Maybe the "right and secure" way to implement from v4 only to dual-stack? Nothing special need, just that a IPv6 client can reach the WAN via IPv6..…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • IPv6 - Two addresses being issued by XG Firewall DHCPv6 server?

    Casual_User
    Casual_User
    I've been looking at a strange issue on my devices regarding IPv6 addressing (at least an issue I think is strange). I am not using SLAAC. I have a Sophos XG acting as a DHCPv6 server issuing a private IPv6 prefix, let's call it AAAA:AAAA:AAAA:AAAA:.…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 136 Firewall SFOS 20.0.0 GA-Build222 IPv6 No Internet

    Erika Koelle
    Erika Koelle
    Need some help getting our Sophos XG 136 (LAB) Firewall working with IPv6. ABCDC01: Role = Windows Server 2019 Domain Controller IPv6 = fc00:2222:3333:4444:cccc:dddd:eeee:10/64 IPv4 = Not Enabled Gateway = fc00:2222:3333:4444:cccc:dddd:eeee:ffff…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Connect - Problems with activated IPv6 on Client

    bmu
    bmu
    Hello, we're using a Sophos XG 135 in Cluster as VPN-Endpoint. On the client side, we're using Sophos Connect with a provisioningfile. If a client gets a IPv6-Lease (on the WiFi-Adapter in Windows, for example), users can't connect with Sophos Connect…
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • IPv6 Configuration and to NAT or not

    tomrgsd
    tomrgsd
    We have been allocated an IPv6 /48 from our ISP. I plan on using Global/Public IPv6 addresses for my clients utilizing /64 networks from that /48. Kinda one of the main goals for IPv6 to not have to NAT behind a public address. I am able to successfully…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS WAF IPV6

    admin_idl
    admin_idl
    Hello, We have the problem that users who work from home and only have an IPV6 address cannot use the WAF rules and web server access. Can we allow "any IPV6"? "any IPV4" is allowed. What would be the best approach here? Thank You!
    • Answered
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • IPv6 LTE Router Telekom

    PifPof
    PifPof
    hi Community. we have a lte router with a static IPv6 IP-Address on the WAN-Side. I turned on the DHCP for IPv6 as you can see below: and as you see, the xgs gets an ipv6 address: The Sophos Cluster has v20 installed and I can see the cluster…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • IPv6 gateway is not work

    akihiro murata
    akihiro murata
    Hello everyone. I had some trouble setting up the XGS136. I have set up an IPOE connection, but the gateway is not enabled. I think this is the reason, but I can't connect to the internet. I have the settings as shown in the image, but is there something…
    • Answered
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • SSL VPN Full Tunnel not routing IPv4 traffic

    DangoPC
    DangoPC
    I have an SSL VPN setup with Full Tunnel. It works fine if I connect from places with IPv4 only. However, when I connect from a mobile phone with IPv6, I can't route anything that is IPv4. The VPN global setting is set to IPv4 only. Please help. …
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • DNS over TLS (DoT) causes "Invalid Traffic" but only on IPv6

    w0rmh0le
    w0rmh0le
    Hi, I want some local DNS servers to do DNS over TLS (DoT) and have configured them accordingly. I created a rule allowing TCP 853 for those hosts - both IPv4 and IPv6. Because of IPv6 is assigned via PD I used the client MAC address (on local LAN…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • How to implement IPv6 from my ISP

    Daniel Christie
    Daniel Christie
    Hi community, I would like to configure my Sophos firewall with IPv6 WAN and LAN. My ISP has provided me with the addresses for this, and I have had a go at getting this to work but with no luck so wondering if someone can help me please. I am using…
    • 12 months ago
    • Sophos Firewall
    • Discussions
  • Enable IPv6 on SSL VPN

    Sandra Koehler
    Sandra Koehler
    Hello, I have a user that has T Mobile as their home internet. Through research and asking peers in the field it seems that T Mobile's setup is IPv6 compatible only. When the user tries to connect via VPN, they get intermittent and slow connectivity to…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • XG v19.5 IPv6 DNAT not Working? See Below (src-ip = dst-trans-ip)

    Brian Thill
    Brian Thill
    2023-11-28 21:19:50Firewallmessageid="00001" log_type="Firewall" log_component="Firewall Rule" log_subtype="Allowed" status="Allow" con_duration="134" fw_rule_id="62" fw_rule_name="DNAT to Spiderman (IPv6)" fw_rule_section="Local rule" nat_rule_id="4…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • SSLVPN won't connect on devices that has IPv6

    DangoPC
    DangoPC
    Hi, I have Sophos XG on ver 19.5. I noticed that when my device is on mobile data which has IPv6 and IPv4 of 172.56.x.x, the VPN won't connect. There are also no logs on the firewall so it was never reached to it. I do not have IPv6 rules and SSLVPN setting…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • IPv6 Neighbor Solicitation on static route

    Geniux
    Geniux
    I have an XG appliance in OVH. Since OVH uses a gateway on a remote subnet, I created a new zone, and assigned PortB to that zone with a /64 IPv6 address. The gateway is added using a static route ::/0 to PortB in reality, the default gateway…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
>