Hi Guys, One of our customers uses a 3CX system and has a separate MPLS connection for it. They bypassed the link to 3cx and accessed their 3cx server through the internet. Now they are requesting us to configure router traffic using the MPLS link…

Hello, I only have one public IP address, but I have several domains, such as ui.mw.com, uat.mw.com, and demo.mw.com Similarly, I currently use port forwarding to visit various domains, such as uat.mw.com:7443 and demo.mw.com:6443. It's doing well, however…

Good Day, Hope anyone can assist me? I have an issue with my VLAN setup on our Sophos XG230. I am using two different ports on the firewall to separate the main LAN from the VLAN and want to route the traffic via the firewall. Switch already been configured…

Ok so I'm in a bit of an interesting issue and I'm not sure whats going on. Recently we had a power outage that was long enough to draw out the UPS and shut down the network stack ungracefully. Up until then I was able to route between VLANs and even…

Hello everyone, I'm reaching out on behalf of a customer who is encountering an issue with their XG230, which seems to be creating two 'phantom routes' as part of the SSL VPN configuration profile. We've noticed that due to these phantom routes, the…

I have a VLAN setup for our IP phones, the phones are able to get an IP but for whatever reason their traffic is not being routed correctly. I have one phone routing fine, but the other is not routing through the correct port. 10.10.52.0/24 is the network…

Hi, to get used to and evaluate sd-wan and xfrm-tunnel interfaces for seamless site2site vpn-connections, i setup two demo-sfos appliances (using home-license!). Site A WAN 1 to Site B WAN 1 & 2. Everything seems to be correct as i can RDP…

I have sophos xg210 , i want to terminate my mpls link to it , my link is an mpls , but the source of mpls cannot ping my computer but i can ping his computer , what could be the issue?

Hello everyone, after days and weeks of trying I finally got a working VPN connection on my XGS! Now I need one more thing as they say: I want one specific VLANs clients to route all NAT Traffic through the Head office Firewall. Why? Geoblocking…

I have a setup where branch offices uses resources and services from head office . Our ISP requested we do BGP configuration for better performamce of their service. After the configuration and connections established, branch offices are able to use…

I work for a small university with a main campus and a single, annex building which is off-site. I have configured a XGS 2100 with an IPsec tunnel between the locations, which is working great. The problem is that I have no internet traffic from my LAN…

Hi, Having a problem trying to get RED traffic passing over a Site-to-Site VPN to branch offices. RED connected to Head Office. Site-to-Site VPN configured and pushed by Central to Head Office and Branch Office. The branch office subnets…

Hi there. I have 3 sites, each connected to our datacenter. Location 2 has a Tunnel interface connection, Location 1 and 3 have a Site-to-site connection. Like this: Location1 ====sitetositetunnel===== Datacenter=====tunnel=====Location2 Location1…

hi all, want to make WIFI traffic go out a new WAN interface, i think im going to do it like this, what you think network > interfaces network zone WAN, add ipv4 details and give it a gateway ip rules and policies > nat rules "default SNAT IPv4" change…

Hi we have two new XGS2100s in HA that have replaced an XG230 On the older XG230 under OS 18.0.5 we had problems with printing from a web server externally to our internal Star CloudPRNT enabled devices (over TCP443). They are very sporadic and…

So here is the deal - I have an entire network of devices (switches, APs, computers, laptops, servers, printers, IoTs) that was all built on a /16 subnet using public IP space and it is all just using default VLAN/VLAN 1. 176.100.x.x/16. It is slow…

Hi, I have the the following setup: Office FW (10.1.0.0/24) <==Policy based ipsec==> DC FW (LAN: 10.2.0.0/24; SSL-VPN: 10.3.0.0/24) <==Route based ipsec==> Partner FW (172.20.32.0/24) I try to announce the routes for the office (10.1.0.0/24),…

Hi I try to setup a virtual sophos as firewall (SFOS 19.5) for my VM in a private vlan et also give access to remote user/site using vpn version :proxmox 7 eno1 -> vmbr0 (public IP as management on ovh infrastructure) eno2 (connected to the vrack service…

Hello, hope all of you are ok. I need help with something. I have 2 sophos, XG310 and XG210, on firmware 19.5.0. Both are in a buildings complex and share a LAN segment. One has GW 10.10.10.1, now Sophos 1 and the other one has GW 10.10.10.2 now Sophos…

Hi Team, We encountered a problem wherein customer needs the following: 1. Head Office will route their internet connection to Branch Office once they experience no internet on the site. 2. Vice versa, Branch office should route their internet connection…

Good day Team l have just deployed a firewall XGS 2300 The network has 5 branches which are connected using GRE Tunnels. The communication from branches to HQ is working fine. We have a problem with the communication from one branch office to another…

Hi Guys, This is our network setup. We have couple of websites and Microsoft Direct Access server sitting on our LAN to access resources from outside . Currently we have PFSence box and all working without any issue. With Sophos no luck. I appreciate…

Since upgrading the firmware version, a couple of devices have been blocked from sending traffic between the subnet 192.168.1.0 and 192.168.2.0. I have set up rules to allow traffic to and from the devices but still unable to ping. the device in…

Hello Everybody I have a new problem with my installed Sophos Firewall Firewall XG115 (SFOS 19.0.1 MR-1-Build365) LAN Subnet:192.168.200.0 Mask:255.255.255.0 GW:192.168.200.1 VLAN 10.20.1.0 Mask:255.255.255.0 GW:10.20.1.1 To be able to configure…

Hi all, I am in the optics and the reflection to start the project of segmentation of my local network. i have xg 330 as edge firewall Si i think about to methods, go with L3 switch for inter-vlan routing or don't make L3 switch and do all the segmentation…