So I have SSL VPN setup and working. I need to know if there is a way to create specific routes for VPN traffic. We have an internal application that resolves to a Public Range, but our internal router has a route statement to send that instead to an…

Hi there, can someone please tell me where I can find the equivalent of Zyxel's Policy Route

Hello, I have this network architecture , And my goal is that the VLAN100 (with Network IP : 192.168.123.0/24) to have access on my Server 172.20.24.24 So , I create this Route on my Sophos Firewall ( version XG S3300 firmeware 19.0…

Hello Everyone, one of our customers has a phone system (Panasonic KX-NS700) that uses multicast to synchronize the Cell-Stations (KX-NS0154). The Cell-Stations (DECT) use PTP for synchronisation.There is one Master and several Slave-Stations. Although…

Good morning everyone, i'm trying to implement BGP over RBVPN, neighbors are up only when i add the comand disable-connected-check and if i use the comand maximu-path 20 they cannot establish, any advise? Also with the comand disable-connected-check both…

Hello everyone, How do i create a static route pointing to null0? I need that route to be a summary route so i can advertise it in bgp. Many Thanks, Dragos

We have 3 internet links; I want to route the web-based system (URL) through one of the WAN links. Please advice on how the routing should be configured. Whenever the user click on the link, it has to point to the dedicated WAN link.

Hello Team, We recently acquired XGS 3300 to replace an ASA cisco firewall. Configurations were done as follows: Sophos XGS 3300 : - Two public IPs were created on the interfaces with the intention of one handling the VPN traffic and the other…

I have 2 XGS "A" and XGS "B", connected by a Site to Site IPSEC tunnel. Connections work fine. Now i have to have access to a network at "B" by a Remote-VPN connection at "A" Remote-VPN => "A" <=> "B" The vurtuell network of the Remote …

I've got a strange one. I've deployed Azure "out of the box" following this doc: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122504/xg-firewall-on-azure-how-to-deploy From the VM, I can ping the Sophos device, but I can…

We have a location where we have Sophos XG106 Firewall serving as Gateway. We have one MPLS link on the location. We are facing issue when we shift / redirect traffic on MPLS link to connect to HO. Static routes are working fine. We are able to reach…

Hi, we have a client, We created a VLAN on a MPLS VPN for a site branch to access the internet from the head office. We have two branches connected under the same VLAN ID. the other one is working successfully, but the other branch is connected but…

Hello, I'm stuck on a LAN routing problem. We changed our UTM firewall to XGS116, I recreated the rules and configuration on the new firewall, but I have a problem with the incoming traffic to the internal network. We have several offices that are interconnected…

Hi, I have a networking related question. I'm not sure if it's a configuration issue on the Sophos firewall. I have a Sophos XGS 136 appliance with a number of physical interfaces configured with the following IP addresses: 192.168.100.1 and 192…

As I've worked through some (not all) setup issues, one that continues to stump me is the fact that when my NAS is connected to switch along with all other LAN devices and incoming internet from router, life is good. I can access my NAS no problem. …

Hi, we have branch which is connected via site to site vpn. They have their own internet access. My question is there anyway i can route the internet on some pc through VPN site to site and not to their firewall? Thanks, Nidz

Hello there, I’m trying and failing to route all internet traffic from device 10.5.15.20 at SITE B across the layer 2 MAN and out ISP1 WAN at SITE A. I’m trying not to impact any other traffic at SITE B with this configuration, only internet bound…

Hello everybody, can these two devices work together? And if it is possible, what is the best way to connect this UDMP to Sophos? At the moment customer is using UDMP as router/firewall. Thanks

Hello, I have bought my first Sophos Firewall and I need some help. Setup: Port1: LAN - 172.16.0.1/23 Port2: WAN - Public IP (PPPoE) Port3: LAN - 192.168.1.1/24 Site-to-Site IPsec tunnel: Port1 172.16.0.1 (local site) - 192.168.0.1/22 (remote…

Hi, I've deployed Sophos XG to Azure virtual network and created routing table so that all traffic goes through Sophos XG. Behind firewall I have old preconfigured (used before fw implementation) linux web server connected to XG lan interface and I…

Hi there, I have no experience with Sophos firewalls. I recently purchased XG 125 for a small office. I have done the initial set up and the device is connected to the internet. I connected a level one switch (unmanaged) to the one of the LAN ports…

Hello Everyone, Apart from Sophos SSL VPN, I have a Centos based OpenVPN server, which is behind my firewall. My OpenVPN clients access that server through a DNAT rule. I have created a VPN tunnel (Site-to-Site) between Sophos XG and AWS, using this…

Setup Sophos XG 330: LAN Port 9 10.0.0.248/24 LAN Port 9.8 10.0.8.248/24 FIREWALL RULE: LAN any - LAN any ALLOW Port 9 plugged in Switch port 24 Layer3 Switch: VLAN 0 10.0.0.1/24 VLAN 8 10.0.8.1/24 Port 24 Trunk ALLOW ALL VLAN Port 1 VLAN=0 Port 2 VLAN…

Hello, i have a problem and i hope you can help me: 1) I have a zone called >RED, with my REDs in branch offices (Ip-network: 192.168.41.1/24) 2) I have some destinitions which are connected with IP-Sec connections (IP-Network: 172.30.200.0/24…

Hello, I apologize if this is a rookie question. I have 2 XG 430s in HA mode behind a Cisco 3900 router. ISP>Cisco>XG>Users My question is can we use the Firewall(s) for routing and eliminate the Cisco router? I believe it's only doing layer 3 routing…