I have 2 firewalls. Firewall A is a XG and Firewall B is an SG A ---- B IPSEC Tunnel On A x.x.x.x/24 can ping on B x.x.x.x/24 and vice versa However on the A side if you browse to the webpage of that device such as a esxi host or synology…

Hi, Please see my network diagram attached here. I have Head Office and Branch office connected by a point to point link. Cisco router is connected at both ends for routing on point to point link. Head Office LAN Switch Subnet 192.168.1.0 is connected…

Hi folks. Im a learning Technician in Sophos XG and i need help with this request. Acctually we have a Sophos XG FW 18.0.1 and we have a software provider where we access a particular software in one server. The service provider has allowed the traffic…

Hi everyone, I'm trying to do something new to me, and I'm loosing in it... I'm trying Windows Virtual Desktop so with a partner have configured vpn site-to-site from my main office to Azure. It's works as aspected, I can ping from my local network…

sophos A (10.128.1.1) -> VPN -> sophos B (10.1.122.1 / 255.255.0.0) - LAN - host B 10.1.3.153 (255.255.0.0 / gateway 10.1.1.3) - gateway (10.1.1.3) - sophos A can ping host B but cannot ssh host B - sophos B can ping / ssh host B - host B can ping …

sophos has PORT 1 and PORT 4 PORT 1: 10.1.2.42/255.255.0.0 PORT 4:10.1.122.1/255.255.0.0 a windows PC default gateway set to PORT 4 (10.1.122.1). but traceroute from PC to external host shows that gateway is PORT 1 (10.1.2.42) why? any wrong setttings…

Hi there, I have two internal LAN networks on two ports. (Ports 1 & 4) I have an internal LAN-LAN rule with all filtering/scanning disabled. Logs show all traffic to the 192.168.100.0 network is allowed. From PCs on the 192.168.1.0 network I…

Hello all, We are in a migration process to a new LAN installed, on our building, moving from a Ubiquiti Unifi Network, to a FULL HPE Aruba Network. For now we would like the old equipments, to contact the new equipments on the NEW LAN, before we…

Hi to all Sophos Experts! I would like to share my experience with my SOPHOS XG86 Firewall. I tried to create a new firewall policy after updating the firmware to v18. I did some test and I encountered a weird issue with routing wherein when I selected…

I've been having an issue with V18 MR-4 for some time now and really can't seem to figure it out. I have a workstation 172.30.30.104 attempting to ping a printer 172.20.20.30. As you can see in the capture below, the ping reaches the printer and it attempts…

We notice a strange routing decision of the XG to networks not routed by the XG itself. This traffic is forwarded to an IP address I cannot find any routes to. Also the XG does not even have an IP address in the network range of that IP address. If…

Dear, I'm evalutaing Sophos XG Home in Bridge mode. This is on a virtual appliance. I have experience with Pfsense, Palo Alto, Fortinet and Untangle firewalls. My home network has a pair of Cisco ISR G2 (3925E) routers in HSRP, each connected…

Can someone please help me! I have been having issues lately with my Sophos XG 330 rev.2 Firewall. First off I have had a complete system crash where I had to completely re-install firmware (the system reboots to "fail safe mode") Next I keep randomly…

Dear all experts, Not sure whether am i in the correct place to ask this question. As below diagram, i have a layer 2 Switch (Switch A) connected to the XG 135 firewall. My boss has got another layer 2 Switch (Switch B), he intended to create…

Hello I am a home user with a big family and an IT person who likes to play with technology own site https://brokescholar.com/ I stumbled on Sophos because I wanted something with good DPi and Web filtering. I ended up installing Sophos XG 18 and…

We have 3 lines Line A: - has a fixed public Ip - is needed for authentication with MS services (Exchange365 and others). Certain requests to MS have to be initiated over this fixed Ip - is part of a VPN - has the lowest bandwidth Line B and C - have…

Hello, short question. I am fairly new to Sophos XG. I come from Sonicwalls and I am trying to enter a normal route where traffic from Any source going to LAN 192.168.1.0/24 should go through a certain gateway (Coreswitch). The normal static routing…

Im using XG Xtream SFOS 18.0.4 MR-4.I've successfully configured site-to-site IPsec tunnel. Im able to ping other no issue. Now i want to know how i can route specific websites over the tunnel to other point. Like facebook, Google and Instagram traffic…

Hi, I am running IP-sec s2s vpn between branch(Sophos- CR25ING, XG v17.5 ) to HQ (Palo Alto-5220), vpn established and working fine. for better security and filter, we need all traffic should be routed through HQ, how can we achieve this? I have…

I am working on a project and was wondering if it is possible to create Sophos IPsec Tunnel interface to connect to Azure VPN tunnel interface. Basically Route based VPN to azure.

Hi all, we have couple XGs in place (18.3 and 18.4). Each with multiple WAN lines and each line has different IPs. When using Mail on XG: How to restrict mail traffic (In- and outbound) to dedicated Lines and IPs? Thanks for hints Gernot

Hey there, I set up two VLANs. VLAN 3 and VLAN 4. I can ping the gateway for both of the IPs, but can't ping all the IPs on them from the main subnet on the interface that the VLANs were created on. The difference is, the gateway and cisco switch everything…

Hello Community, I have a strange problem. I have a successfully established IPsec connection between an UTM and a XG firewall. Both products have the latest firmware: UTM with 9.705-3 and the XG with SFOS 18.0.3 MR-3. The IPsec connection is established…

Hello all, I currently have the problem that I cannot use streams behind a Sophos XG. The stream breaks again and again. In use is a Sophos XG v17.5 Multicast is set up, but if this is correct I can not say. I used this article: support.sophos.com…

Hello Everyone. I hope you can help in providing internet access to my network on my new SOPHOS XG86W. Currently it cannot reach the registration server to sync its registration and any clients connected to the LAN or WiFi can ping external addresses…