• Multiple WAN aliases for outbound traffic

    Andrej Pirman
    Andrej Pirman
    Hi, what would be the proper way to configure different WAN ALIASES for outbound traffic, for example in this manner: LAN users would use WAN Alias 1 for browsing and accessing web LAN2 users would use WAN Alias 2 FreeWiFi users would use WAN…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Question regarding #Port and ##ALL_RW special IP hosts

    Wayne Folta
    Wayne Folta
    Looking at IP Hosts like #Port2 or ##ALL_RW, they are dynamic IP addresses, correct? So if Port2 is my WAN port and the ISP changes my IP (via DHCP), wherever #Port2 is used in any rule will automatically be updated instantly so that the rule still applies…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • XG 210 One ISP, Two Different IP Blocks

    Clay Tsuhako
    Clay Tsuhako
    Hello: I have a WAN port (Port 2) that is connected to our ISP with an IP block of 65.170.xxx.xxx/29. We have another block of IP addresses from the same provider at 63.162.xxx.xxx/29. Both come in thru the same ISP router (Cisco 4300). There are 4…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Recreate device access via CLI - no access because there is no untagged port in the "LAN" zone

    dirkkotte
    dirkkotte
    Hi all, can someone provide a hint, how to access a device where all LAN-Interfaces are "tagged" and "LAG"-ports? I've restored a migrated config and now the only untagged port is the WAN-port (can#t ping or access these port) I am able to access…
    • Answered
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • xfrm interface not showing in GUI when tunnel is created

    Alexander Neugebauer
    Alexander Neugebauer
    Hello Community, I am currently in Poland setting up a second S2S tunnel and I am struggling with the fact that the xfrm interface of the tunnel cannot be found under the interface to which the tunnel is bound. What am I doing wrong? Attached are some…
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • configure mobile WAN as backup line

    GernotMeyer
    GernotMeyer
    Hi all, any hints to configure mobile WAN as backup line? wired WAN is default but when line is down mobile WAN should jump in place. Mobile WAN must be turned on or not? WWAN Interface must be to automatic or manual? Thanks for help …
    • 1 month ago
    • Sophos Firewall
    • Discussions
  • Maximum number of IP aliases per interface?

    Jaroslav Faldik
    Jaroslav Faldik
    Hi, Is there a limit to the number of IP aliases per interface?
    • Answered
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • Cellular WAN constantly showing up and down, but never *actually* going down

    Daniel Fehrenbach
    Daniel Fehrenbach
    Brief description of my setup: WAN1 is a hardline connection. WAN2 is a cellular 5G connection, using a standalone antenna and modem. SD-WAN 1 is configured for general internet traffic, where WAN1 is the default and WAN2 is failover, using TCP…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • LAG configuration

    Reem Jalal Eddine
    Reem Jalal Eddine
    Hello, So I have a weird scenario and I need second opinion. We have two firewalls Active Passive and two switched Active Active The first switch was configured to connect to the primary firewall on a port F4 and this port has vlan on it,…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • SFOS 20.0 MR not showing any bandwidth in interfaces

    Andreas Wolter
    Andreas Wolter
    WAs used showing false bandwidth but after upgrading I get this: Anyone else experiencing this ?
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Transparently insert Sophos XG in a working network

    AGamal
    AGamal
    Hello, I have a situation where my ISP installed a router and gave me a subnet ( 10.1.1.0/24 ) with the gateway being the router(10.1.1.1). My understanding is that I need to configure an internal network (i.e 10.1.2.0/24) on the LAN side of the firewall…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • XGS SFP ports not working until you specify interface speed (1G or 10G XGS, v20)

    LHerzog
    LHerzog
    Update to LAG not working unless you specify interface speed Using XGS4500 on 20.0.0 GA-Build22 with XSAZTCHF4 "Sophos FleXi Port Modul 4 port 10GbE SFP+" LACP bonding was not working on PortsA1-A4 unless specifying 10G Interface Speed manually, disabling…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • /31 WAN

    Jenny Skinner
    Jenny Skinner
    Hi, Can anyone confirm whether Sophos supports /31 subnet config on WAN interfaces please? XG2100 running SFOS 20.0.0 GA-Build222 Thanks
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Multiple NICs on same LAN Subnet

    ml17
    ml17
    I have recently switched to a new ISP who allows me a blistering 3GB connection of which I wish to take some advantage. To do this, I rebuilt a new firewall from scratch with a 1Gb onboard NIC, plus a 2x10Gb NIC. This gives me 3 ports, which are in order…
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • WAN Port Issue

    Niranjan Kumar
    Niranjan Kumar
    Hello Team, We are using the Sophose XG firewall, I would like to raise the concern regarding WAN Ports are not working, can you please help on it
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • configure PPPoE XG86 with router with built in GPON ONT (Nokia FTTH Modem)

    Sofos network
    Sofos network
    Hi all, Today I have a new problem which dates back more than 3 months to configure the firewall with the Nokia FTTH modem in bridge mode. -Sophos XG86w -FTTH modem Nokia: G-1425G-B The Device is a router with built in GPON ONT - it is for broadband…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall Interface Not Connecting with Correct Subnet

    Gavin Gnanapragasam
    Gavin Gnanapragasam
    Dear All, I have observed a strange behaviour from Sophos XGS3100 firewall. My LAN network is 172.20.52.0/23 network. When I connect the Sophos firewall to my LAN, the Firewall gets an IP 172.20.52.145/23. After that I cannot ping or access the interface…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Loopback Management interface

    mohammed kassouat
    mohammed kassouat
    Hi, I'm reaching out because I'm interested in configuring a loopback interface to manage Sophos. I prefer not to use the IP from our management network for this purpose. I attempted to create an alias on port A, and while I can successfully ping it…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Sophos xgs 116

    aaa kkk
    aaa kkk
    Hello, Is it possible to get 10gbit connectivity on xgs 116? Are there any expansion modules for this firewall? Thanks
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • XG125 - Unable to remove physical and virtual interfaces from a bridge

    Comfortably Numb
    Comfortably Numb
    Could do with a little help in recovering both my physical port 5 and virtual interface from a bridge that’s no longer responding to any configuration options. Initially the intension was to bring together DLAN devices over the physical port and those…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS 3100 LAN to LAN using NAT

    sbay
    sbay
    Today we want to replace our old UTM with an XGS 3100 cluster. In advance, we had created rules manually. But we were only able to test it today. We have a LAN port 1 (192.168.2.0/24) and a 2nd LAN on port 7 (192.168.201.0/24) When I access 192.168…
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Disabling a Physical Port through a rule - i.e Disabling WAN Physical Port when internet goes down.

    Shree Shyam Accociate
    Shree Shyam Accociate
    I am facing a very unique scenario where I simply want to disable the one ISP which in going in through Physical port in Firewall when that particular ISP goes down, don't want it as backup or primary, just want that port to turn itself off when ISP goes…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall Home Edition v20 with Sky ISP - DHCP Issue on WAN interface

    AgentY
    AgentY
    Hi. I am having what seems a very basic issue getting my WAN connection connected to Sophos Home Firewall version 20, I'm hoping someone can help? I've found various posts regarding this over the years but am still unclear exactly why it's still an…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Accessing subdomains.

    Kurt File
    Kurt File
    Hello all. I'm a newb home user coming from OpnSense. I'm having an issue accessing my subdomains. This is something simple that I'm just not understanding. A couple pics will help explain what I'm trying to accomplish, and my setup. Interfaces …
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Setup Static Public IP on firewall from 5G Router

    avett1058
    avett1058
    I have the static IP from the provider. They said there was no gateway, subnet or dns, just APN. I'm looking to connect this similar to a WAN interface for a circuit. I know we have to setup the router as a bridge/pass through. I need the firewall…
    • 9 months ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
>