Hi, I've got the following case on a customer site: Internal webserver on LAN, needs to be accessed from same or different internal LAN on the external IP, normally I use a loopback NAT rule and this works. Since a few weeks we had to switch to…

Hi, I need to set up my v20 OS firewall in active-passive mode. I've already done some configuration, but I'm facing issues with automatic failover due to using "Any" in the NAT rule. Can you provide a straightforward solution using SD-WAN or WAN Link…

Hello Team, i have a problem in this scenario. I have configured: LAN1: (Physical interface) 192.168.1.1 LAN1:0 (Alias Virtual Interface) 192.168.1.242 LAN1:1 (Alias Virtual Interface) 192.168.1.241 ISP1: (Configured on WAN Physical interface…

Hi, I've got the following case: HA XGS3300 Three WAN connectinons P2 ISP 1 P4 ISP 1 P6 ISP 2 P2 and P4 are BGP. P6 is stand alone. All internet connections are working. When configuring SNAT and or SD-WAN all traffic for WAN is over…

Hi community, I need help to complete this configuration. A customer needed to improve the VPN configuration beween his hq to the Oracle datacenter. He had 4 classic IPSEC vpn PROVIDER1-ORACLEIP1 PROVIDER1-ORACLEIP2 PROVIDER2-ORACLEIP3 PROVIDER2…

Need help on this issue, I tried to configure the SD WAN routes destination to use SD WAN profile, but the traffic keep going through default. I have tried to disable the Underlay SD WAN route and access speedtest.net (I put speedtest.net as destination…

We have a /29 subnet from our ISP. I want to use a dedicated public address for our guest network traffic. I've added an alias on the PPPoE port and thought I could then just use an SD-WAN rule to route the traffic, but the alias doesn't appear in the…

I'm having an issue where we have two vendor routers that need to be highly available to all branch and data center locations (No changes permitted on the vendor R1 and R2) The networks at all the branch locations consist of a Sophos XG135 as the Gateway…

Hello World, I have to Internet gateways from my ISP as part of a package deal. I would like to use one internet gateway as my production traffic and the other gateway as my lab traffic. None of the resources behind need to talk to each other. I just…

clear 840 / 5.000 Übersetzungsergebnisse Übersetzung Is there a way to delay the failback in the event of a WAN failover? Our customer gets his Internet access…

Kindly help. I configured a load balance on two ISP links for my users. Among those users, I want some specific users to make use of just one of the ISPs only whole the rest use both.

Hello, Do you have any recommendations for classifying financial services/banks and bank websites in the Application object? I need to use SDWAN for this type of service, but generally access to these sites are classified as "Secure Socket Layer…

Hello. I wonder if Sophos Firewall could be set up to have each VLAN having different WAN gateways ? For example, VLAN 1 will go to WAN 1 and VLAN 2 will go to WAN 2, so that there will virtually be two networks. Originally, I was thinking to set…

Hello all, I have several firewalls claimed on Sophos Central and SD-WAN connection groups among them. One of the branches will be without power for about two weeks, so the firewalls and tunnels to this branch will be offline. Is there a way to…

I wanted to understand how does Sophos firewall measure Latency, Jitter and Packet loss. Is it measuring these metrics between the firewall and the WAN gateway or between the firewall and an external endpoint, if it's the second case then what is this…

We have 2 firewalls at the main office in an active-passive HA pair. We just purchased another smaller XGS 107 to be used at a remote branch as a start to our SD-WAN project (we are going to be purchasing more firewalls to add later, but want to use this…

I have 2 XG ver. 20 firewalls between 2 sites, both with Static public IP. There is a SDWAN route based VPN between the 2 sites, and it works perfect. the roude precedence is SDWAN, Static, VPN. I am trying to publish an internal server resource that…

I have a primary and backup ISP, with the backup ISP being a cellular-based limited bandwidth plan. The purpose of the backup ISP is for my “critical” devices such as my home server which hosts my alarm system via Home Assistant (so I can still receive…

Hello everyone, Today I am trying to deploy a network system running load balancing But I am currently stuck with a problem. That is, I cannot get the VLAN to use the correct internet line that I want. My idea: i want VLAN 50 and VLAN 70 to…

I am using Sophos Xg 125w V20 and i have configured two Wan link Manager. Wan link manager1 as my ISP and Wan link manager2 for Vlans and i want all my normal browsing to go through wan link manager1 instead of each of my computer on my network to select…

Hi All, Scenario: XGS 136 firewall with two WAN links [Wan1 and Wan2] Server/URL on the Internet that has a static IP [x.x.x.x] Single LAN for the internal users Requirement: LAN users to use WAN1 for general Internet traffic LAN users…

Is it possible to route "streaming media" over a dedicated WAN-connection using SD-WAN routes in SFOSv20? If not possible to route all streaming media, then is it possible to be more specific like youtube, tiktok maybe based on application rule?

We have a main HA firewall XG210 pair, currently in 19.0 latest MR release, connecting to various XG and XGS units in the field. We have dedicated links to the far end locations, and on the XG210 at the head office it is configured as being over LAN…

I have a XG Firewall with 2 WAN (different ISPs) configured and balanced. I would like to set my AS400 to always use only one of these WAN (the onle one with static IPs) I think i might use the SD-WAN Profiles and rules, but could someone help me…

I have got 2 Sophos FW Home firewalls (Home, and In-laws) running V20.0.0 with a red-link working between them. This link has historically been Static Routes at each end and has worked perfectly but we want to separate some traffic so I have tried to…