Hello, I have a situation where my ISP installed a router and gave me a subnet ( 10.1.1.0/24 ) with the gateway being the router(10.1.1.1). My understanding is that I need to configure an internal network (i.e 10.1.2.0/24) on the LAN side of the firewall…

Hi, I am setting up Netflow Monitor to monitor traffic levels on our bunch of XGS Firewalls and unfortunately Netflow reports the discovered interfaces as ifindex(x). What i am trying to find out is the easiest way i can identify what port is being…

Update to LAG not working unless you specify interface speed Using XGS4500 on 20.0.0 GA-Build22 with XSAZTCHF4 "Sophos FleXi Port Modul 4 port 10GbE SFP+" LACP bonding was not working on PortsA1-A4 unless specifying 10G Interface Speed manually, disabling…

Hi, Can anyone confirm whether Sophos supports /31 subnet config on WAN interfaces please? XG2100 running SFOS 20.0.0 GA-Build222 Thanks

when restoring a config from a 10 ethernet port machine with port 10 configured, on a 8 ethernet port machine, I noticed the config from port 10 was simply moved to the second next port, which is port F2 here. 10 was the HA link and at first I did not…

I have recently switched to a new ISP who allows me a blistering 3GB connection of which I wish to take some advantage. To do this, I rebuilt a new firewall from scratch with a 1Gb onboard NIC, plus a 2x10Gb NIC. This gives me 3 ports, which are in order…

Hello Team, We are using the Sophose XG firewall, I would like to raise the concern regarding WAN Ports are not working, can you please help on it

Hi all, Today I have a new problem which dates back more than 3 months to configure the firewall with the Nokia FTTH modem in bridge mode. -Sophos XG86w -FTTH modem Nokia: G-1425G-B The Device is a router with built in GPON ONT - it is for broadband…

Dear All, I have observed a strange behaviour from Sophos XGS3100 firewall. My LAN network is 172.20.52.0/23 network. When I connect the Sophos firewall to my LAN, the Firewall gets an IP 172.20.52.145/23. After that I cannot ping or access the interface…

Customer is installing a new ISP connection but will have the old one for a while as they have WAF to an internal server, and DNS pointing to current ISP PIP. Left Port2 configured as it was. WAN zone, with static IP info. Configured Port3 to be the new…

Hello, I'm kinda new to networking and I'm currently working on a network lab to enhance my understanding of firewall concepts. My setup consists of the following: Virtual Machines: Kali Linux VM (IP: 192. 168. 10. 128) Windows VM (IP: 192. 168…

Hi, I'm reaching out because I'm interested in configuring a loopback interface to manage Sophos. I prefer not to use the IP from our management network for this purpose. I attempted to create an alias on port A, and while I can successfully ping it…

Hello, I need your kind assistance regarding a new Sophos XGS116 that I am using. Can you please tell me how to set the keep alive interval of a wan interface? It is set to ping at 8.8.8.8 but I do not know the interval of pings, how often they are. …

Hi, I am new to sophos firewall world. Yesterday, I discovered that my firewall is still accessible using the default ip address that was assigned for initial configuration. I have discovered that Port 1 has this IP but there is no ethernet plugged…

In many customer-projects we need to change the interface <-> hardware-port associaton within network-projects. I'm aware that you can use XML export/import to do this, but there still the risk to forget about some dependencies and failing manual config…

Need some help getting our Sophos XG 136 (LAB) Firewall working with IPv6. ABCDC01: Role = Windows Server 2019 Domain Controller IPv6 = fc00:2222:3333:4444:cccc:dddd:eeee:10/64 IPv4 = Not Enabled Gateway = fc00:2222:3333:4444:cccc:dddd:eeee:ffff…

Hello! We are planing micro segmentation of our server farm and thus will need a bunch of vlans in the range of 200-300, but there seems to be a limit on how many vlans can be added to a physical interface according to this kb: https://support.sophos…

Hi, We have a vnet in azure with 2 address spaces 10.50.x.x and 10.90.x.x. We have deployed a sophos firewall there and added 2 subnets in 10.50.x.x as lan and wan networks. We also need to have 10.90.x.x network connected to the firewall. When we try…

We have been allocated an IPv6 /48 from our ISP. I plan on using Global/Public IPv6 addresses for my clients utilizing /64 networks from that /48. Kinda one of the main goals for IPv6 to not have to NAT behind a public address. I am able to successfully…

Hi everyone, I can confirm that (to me :-) there seems to be a bug if you have more than one WAN interface with PPPoE: The " Schedule time for reconnect" under "Network" -> "Interface" -> WAN-Port will not be respected though it will show correctly…

Hello, Is it possible to get 10gbit connectivity on xgs 116? Are there any expansion modules for this firewall? Thanks

Could do with a little help in recovering both my physical port 5 and virtual interface from a bridge that’s no longer responding to any configuration options. Initially the intension was to bring together DLAN devices over the physical port and those…

I'm upgrading my firewall and trying to figure out a simple way to switch my regular LAN from port1 to portF1 after importing the backup. I want to upgrade from the regular 1-gig connection to a faster 10-gig SFP connection. The tricky part is that there…

Today we want to replace our old UTM with an XGS 3100 cluster. In advance, we had created rules manually. But we were only able to test it today. We have a LAN port 1 (192.168.2.0/24) and a 2nd LAN on port 7 (192.168.201.0/24) When I access 192.168…

I am facing a very unique scenario where I simply want to disable the one ISP which in going in through Physical port in Firewall when that particular ISP goes down, don't want it as backup or primary, just want that port to turn itself off when ISP goes…