Hi There, We have a XG430 firewall with 2 different dedicated network, we want to route the traffic of Microsoft OneDrive and Sharepoint access to another network, as this network did not have so many access , can you show me how to do this in our firewall…

Are there any technical guides or knowledge base articles related to migrating internet service from ISP1 to ISP2? I have multiple public IP addresses in use with my current ISP. On these public IP addresses I am connected to multiple remote locations…

hi all, have the xgs firewall and i can ssh into console via admin but whats the command to see what sd wan policy its using or whether its on and if need be, change it to sdwan first and then vpn thanks, rob

Hi, We have several departments and connect them via IPsec “Tunnel Interfaces”. For each interface we set up a Gateway and configured a SD-WAN policy. This works for the most Services, but not for VoIP and Radius. The traffic is logged as allowed…

Dears, I Have firewall SOPOHS XG230. I have two gateway to internet. when do rule LAN to WAN and select nat rule MASQ to access intenet. I want change internet gateway for some LAN's IP, how i can do it? some LAN access intenet from GW1 …

Hello All, Need help with Failover - I've a XG106 with MPLS Terminated on it and ILL. IPSec Tunnel is formed between HO and this XG106. I want to achieve Failover of Connectivity to HO on IPSec Tunnel in event of MPLS down, using SD-WAN. Tried seaching…

Hi All, newbie in Networking. Currently, we have this network setup We are planning to get an additional ISP exclusive for one of our departments. Is it possible to connect another modem(ISP) to our router and which configurations should I do to…

Hello everyone, I have the following network map layout: I use a dual-WAN bandwidth aggregation configuration rather than a failover one for most of the interfaces. However, I look forward to assigning my TrueNAS server (VLAN 9) to only use WAN…

Hello, I hope somebody can give me a hint... I got a 18.5.2 with 2 seperate WAN links and I want some clients to use link1 default, failover to the second if it is not available. I also managed that, BUT: I couldn't find a way to tell SD WAN…

Good day all, I am running Sophos XGS3100 Firewall SFOS 18.5.2 MR-2-Build380 I'm trying to get lan 1 to wan 1 and lan 2 to wan 2, and in the future it will be lan 3 to wan 3. I tried to do this via SD-WAN and Static route but after about 10 minutes…

Hey All, I was kinda wondering, I Sophos V17 you could select the NAT on the FW rule itself and that that's the route it would take But now in V18 its separated, If you have one link can you add NAT rules on its own with no SD WAN routing would…

HI, We have 3 ISP(ISP1, ISP2 and ISP3) connected to our firewall in our HQ. In our HQ we have at least 5 subnets. My question is can i let some subnet to utilize only ISP2 for internet, not just internet but fully utilize the link. The other link i…

Kindly help. I configured a load balance on two ISP links for my users. Among those users, I want some specific users to make use of just one of the ISPs only whole the rest use both. How do i go about it in v18 because it is very easy in v17. …

Hi, i try to configure a SD-WAN Route for a failover scenario with 18.5.2. There is a VPN Setup for a Branchoffice with a listener/gateway IP configured. Clients are on the local subnet and communicate with the Hostingsolution over VPN. Now the…

Hello, I would like to change the Load Balling in my Firwall rule which has a migrated NAT rule. In the NAT rule I cant ch age anything. How can I chnage this? Thank you!

I've recently taken a closer look at the SD-WAN route settings. In the Help section it states the following: The heading in the SD-WAN section states that the default route is SD-WAN > VPN > Static This means that I must specify the Internet IPv4…

Hello, our partner tried to implement Policy Based Routing on IPSec Tunnels. The induividual policies for the tunnels seemed to be okay but we ran into the problem that there was an issue with a Policy Route from Source Any to Destination Any where we…

Hello, I have a sophos XG in beta v19, I wanted to test the SD-WAN routes but I can't get it to work. I have three WAN accesses and for my sdwan route test I just created a rule that routes all nperf (fqdn) traffic to a specific wan. My rule is not…

hi all, under "routing > SD-WAN policy routing > add" incoming interface - you can only select one interface from the drop down menu but under "rules and policies > NAT rules > new nat rule" you can select multiple "inbound interfaces" just wondered why…

hi all, we have quite a few LANS on LAN/DMZ zones and two WANS i want one specific LAN (dmz zone) to go out WAN2, obviously i know i need to create an SD WAN, SNAT MASQ and firewall lan to wan rule for this (below) https://community.sophos.com/sophos…

Hi all I have 2 WAN, 1. WAN1 2. WAN2 I wan to use WAN1 for these group of internal IPs(192.168.0.5 - 192.168.0.10) and WAN2 for IPs (192.168.0.20 - 192.168.0.30) I was able to change WAN port on version 17.5 But i can not find this function…

SOPHOS XG 125 How to create a Migrated IPv4 SD-WAN policy route and show it in the SD-WAN policy routing, and please answer with pictures .. Thank you

I have two Sophos XG Firewalls ( SFOS 18.5.1 MR-1-Build326) Both are managed by Sophos Central and I used the platform to create an SD-WAN between the two offices. I am trying to get the Branch Office XG to access the AD at Head Office in order…

Hello I've setup a new SD-20 in our office using the 4G Module that plugs into the SD-20, the unit seems to be in "failover" mode with the red status system light blinking red and others flashing green, the network is up and working i can access my…

Traffic from my LAN interface cannot go to branch even though all policies are defined correctly. But the reverse worsks. Traffic from the branch are able to reach services at HQ. What might be the issue.