• Problem with 2 Wan link Manager

    Viatory
    Viatory
    I am using Sophos Xg 125w V20 and i have configured two Wan link Manager. Wan link manager1 as my ISP and Wan link manager2 for Vlans and i want all my normal browsing to go through wan link manager1 instead of each of my computer on my network to select…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • ROUTING TRAFFIC TO A DESTINATION VIA A SPECIFIC WAN INTERFACE [SD-WAN ROUTING]

    Abdurrahman Mubi
    Abdurrahman Mubi
    Hi All, Scenario: XGS 136 firewall with two WAN links [Wan1 and Wan2] Server/URL on the Internet that has a static IP [x.x.x.x] Single LAN for the internal users Requirement: LAN users to use WAN1 for general Internet traffic LAN users…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Firewall Policy with Limited Access no Working

    CreateShare
    CreateShare
    Hi, I have two WAN Links. Firewall rules and sd-wan routes are created. If I add a new firewall policy to allow internet for a server that is not included in the default policy, it does not work. I created a new nat policy and sd-wan rule, but it did…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Route streaming media over different WAN-connection

    apijnappels
    apijnappels
    Is it possible to route "streaming media" over a dedicated WAN-connection using SD-WAN routes in SFOSv20? If not possible to route all streaming media, then is it possible to be more specific like youtube, tiktok maybe based on application rule?
    • Answered
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • SD-WAN Connection Group and High Availability failover

    JakeSophos
    JakeSophos
    Hello, I am looking to confirm if the below is feasible. We have a HO and BO. The BO hosts a number of production servers and so there is an SD-WAN Connection Group that connects the two firewalls and allows certain services to certain VLAN networks…
    • Answered
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 19.0 and 19.5-traffic choosing wrong firewall rule if using SDWAN rules to far end subnet

    Administrator User395
    Administrator User395
    We have a main HA firewall XG210 pair, currently in 19.0 latest MR release, connecting to various XG and XGS units in the field. We have dedicated links to the far end locations, and on the XG210 at the head office it is configured as being over LAN…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Can i assign a specific WAN interface to be used by some specific devices?

    Matteo Frati
    Matteo Frati
    I have a XG Firewall with 2 WAN (different ISPs) configured and balanced. I would like to set my AS400 to always use only one of these WAN (the onle one with static IPs) I think i might use the SD-WAN Profiles and rules, but could someone help me…
    • Answered
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Help Needed: Sophos XGS3100 Website Browsing Issue with Dual ISPs

    pranto
    pranto
    Hello Sophos Community, I hope this post finds you all in good spirits. We are currently facing a website browsing issue with our Sophos XGS3100 firewall, and I'm reaching out to seek your expertise. Here's a brief overview of the problem: We have…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • Multi-WAN based on Application Type

    w0rmh0le
    w0rmh0le
    Hi, I'm running SFOS 20.0.0 GA-Build222 with two internet Gateways. Basic load balancing seems to be working ok. Now since one link has a much higher bandwidth but also higher latency than the other I would like to send all traffic of Application…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • SD-WAN not routing back to traffic to branch office without static route

    Chris Haydon
    Chris Haydon
    Hi We are pulling our hair out slightly trying to get a SD-WAN deployment to play ball and have so far spent over 10 hours on the phone to support so far without them being able to explain why this traffic is doing what it is. The scenario is a 9…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall - Central Orchestration - SD-WAN SLA probe targets configuration

    Chris Haydon
    Chris Haydon
    Hi Ok so I might be rather dim (and I hope not as I am supposedly a certified SFOS Architect!) but we are deploying a 10 SD-WAN site to site mesh of XGS firewalls with multiple WAN links into each site for a customer using SD-WAN Central Orchestration…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • Use HO Internet for a specific Application Only

    CreateShare
    CreateShare
    Hi, Can branch users use Head Office Internet only for a specific application instead of routing the whole internet traffic? IPSEC Tunnels connect both offices. Thanks.
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG blocking traffic from one local VM to another local VM (asymmetring routing issue?)

    Viacheslav Hranchenko
    Viacheslav Hranchenko
    I have a problem with communication between two local machines that host two different web applications. When I try to connect from VM_3 to VM_2 using the command curl -I https://site.pl , I do not receive a response from the VM_2 . When I try to…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • I want to use my wan 2 internet for dmz

    admin supremeinfra
    admin supremeinfra
    Dear all, I want to use my wan2 internet for dmz Model XG115 (C19xxXXXXXX) Azhar 961939****
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Unable to access a website

    Anesu Dangarembwa
    Anesu Dangarembwa
    we are using Sophos XG210 SFOS 19.5.3 We are unable to access a website on the internal network. If we do a traceroute to the website IP, its coming out with t wrong link which for cameras. We tried to create an SD-WAN profile for the users to use the…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • How to use two gateways on the one router XG 310?

    Viacheslav Hranchenko
    Viacheslav Hranchenko
    Hello, We have two routers configured in High Availability mode. On this devices we have one LAN, one WAN and one DMZ ports cabled with ISP router via small switch. Not so long ago we received a new pool of IP addresses from ISP that we would like to…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Route-based VPN problem

    Cristiano Monteiro
    Cristiano Monteiro
    Good afternoon everybody. I have the following problem. Routed S2S VPN (xfrm) between head and branch and with SDWan activated. Ping between hosts on both networks, ok, working perfectly. Ping from Sophos Firewall to remote network fails. The Firewall…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Problem in using 2 wan links

    pablo carvali
    pablo carvali
    Hi, I'm new to Sophos V19. I have 2 wan links from different ISPs. I don't want to do any load balancing. All I want to do is to access some websites using wan1 link, and some other websites with wan2. I was able to do this in previous versions…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Best choice for link quality

    Gib GoDesk
    Gib GoDesk
    Hey guys. I wanted to understand how to better treat the SLA and the health check. My doubts: 1 - When I select custom SLA, the percentage specified in "maximum lost packet" is based on the "Example size for SLA" right? 2 - If I have packet loss…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • VPN - SD-WAN Connection Group to Azure.

    DavidSain
    DavidSain
    I've built out in the SD-WAN connection group. XGS116 firewall at my remote home office is behind DHCP public IP. Virtual firewall in Azure is behind Azure's NAT. It doesn't seem like an SD-WAN Connection group can handle this as it configures the Gateway…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • WAN LINK Load balancing and failover

    Tharindu Premarathne
    Tharindu Premarathne
    Hi Guys, One of our customers has 3 ISP links and he needs to configure one ISP for the Active and the other two as a Backup line, When active links go down, we have to use both backup links to share the traffic. Is there any workaround for that scenario…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • SD wan Connection Group vs Site to Site VPN

    Louis Havenga
    Louis Havenga
    Good Day Members, I Trust you are well. We currently have 5 sites with site to site SSL VPN configured. We are investigating SD-WAN connection Group in Sophos Central. This will assist us in setting a couple defaults policies that that would be the same…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Enable SD-WAN Zero-impact failover

    Suporte Braveo
    Suporte Braveo
    Hey guys, hope all is going well. I'd like some guidance on how to enable SD-WAN Zero-impact failover. My setup is pretty basic, with an XGS 2100 and two WAN connections. I have them configured in a fail-over approach (not load balancing), using an…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Multi WAN Site routing

    cyberhop
    cyberhop
    Hi All I am hoping someone with multi wan experience can help us. I believe its down to routing. So we have 3 WAN's in operation, see our diagram attached, the copy monitors all sorts of different types of alarms and also has a phone app you can use…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Using CAA via VPN No Longer Working

    Ted Bealmear
    Ted Bealmear
    I have a, what feels like to me anyway, a unique way of accessing my remote firewalls. I use the CAA client when I am at my office to authenticate myself to the firewall. This in turn allows me to access my remote firewalls via the SDWAN that is configured…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>