Hi community, the description of the Server Access Assistant (DNAT) says that all in all four rules should be crated, a DNAT rule, a SNAT rule, a loopback rule and finally a firewall rule. The assistant then, however, does not create the…

Hello All, I have set up multiple DNAT rules for port forwarding with the DNAT Assistant. I want my XBOX to have Any Services and my QNAP storage defined services. However, when I am configuring with such config, then both don't work. If I change…

My goal is to have some webcams at home, each using their own dedicated Port number (same port #) through the Internet - Firewall - Switch - camera. (Obviously the switch doesn't care. But my web cams do care. I have posted a copy of my Firewall and…

Hi, I've got a /56 ipv6 range from my provider and implemented that range in my local network. First I had to config Snat on the firewall for IPv6 so I could access internet over ipv6, that's working fine now. But I have problems accessing internal…

I have a sophos xg 330, with the following configuration: 1. Port 1 LAN | 192.168.2.1/24 | gw 192.168.2.1 | static ip | DHCP Server 2. Port 2 WAN 101.102.1.2/24 | gw 101.102.1.1 (mikrotik) | 3. Port 3 DMZ | 172.16.128.6/24 | gw 192.168.6 | I've…

Hi guys, please help me with a question. I created a NAT to publish a web server, http port, LAN IP 192.168.0.210, the public IP is the same configured in Sophos XG, 187.77.x.x. Everything works fine, external users can reach the website, the address…

First, great software. Not an expert at this but trying to do the following: simply access an FTP site using Filezilla as a client behind SophosFW. I've tried everything I can find. Personally, the search is wonderful but includes results that neither…

Hello. I'm having difficulty accessing devices within DMZ from the Internet. I'm trying to reach the Dave-Powerswitch in the DMZ which is connected by its own discrete network, but nothing appears in the Sophos logs (success or failure) and no response…

hay i have sophos XG210 (SFOS 18.5.2)and I want to create a rule with nas-qnap to access to my nas from the wan . thinks

Hello everyone, I am just an IT amateur first time trying out Sophos XG firewall v18. Here is my network map: Where: VLAN 11 = Port 3.11; VLAN 1 = Port 4.1; VLAN 9 = Switch 0.9; VLAN 17 = Switch 0.17 Objective: I am trying to open the following…

Hello guys. I would appreciate your insight regarding a potential issue I have. To begin, I have "migrated" from Sophos UTM to Sophos XG a few weeks ago. With the - much appreciated - help of the community I have managed to replicate the settings…

Hello, My issue is quit difficult to understand but i will to explain you the most clearly as i can. I have customer that he have many Zones on his actual Firewall : Sophos UTM9 (LAN, WAN, DMZ, WIFI, HA, RED). He have three third application that…

Hello I am trying to publish a website on IIS installed on an internal server I did the dnat but it did not work , dnat just looks like a regular rule , not like it used to be any KB to check ? i use a different port

I'm in a bind and really need help with this configuration. I have a client that is replacing a Meraki router with a XGS126 on SFOS 18.5.2 MR-2-Build380. In the Meraki router they had 1:many NAT port forwarding rules that said for 162.x.x.x public…

hi all, we have setup a DNAT to a DMZ web server which works, when people are trying to access it externally ie WAN, when they type in the FQDN it resolves to the correct external ip and they can view the website we have one internal LAN network that…

Hi all i have a Sophos XG SFOS 18.5.2 MR-2-Build380 DNAT created via Wizard, checked everything with working DNAT rule on another Sophos XG. in the firewall log so far i could see that the DNAT rule was not triggered, it was always the default rule…

Hi Everyone, I have server with a web service that I had manage to NAT and could be accessed using the public IP, like this [Public IP]/Berry After some updates to the software, let's call it Berry, it could now only be accessed (internally) using…

Hello, I have searched the forums to see if there was anything to help with this but I have not seen anything. I created a DNAT through Server Access Assistant to try and reach a Minecraft server on my network. Firewall Rule: NAT Rules…

Hi Everyone, I am new in using Sophos firewall, i am trying to configure port forwarding to RDP but no luck. anyone can help me the proper configuration. thank you my firewall is XGS136 (SFOS 18.5.1 MR-1-Build326) Thank you

Hi we are using a XG330 (SFOS 18.5.2 MR-2-Build380). We have create a rule that allow RDP (TCP: 1-65535 : 3389) to dedicated server. But we are unable to open a connection by RDP, anyway if we enable no Port restriction to the host. We already have…

Hi, I need help for setup XG125 with Lenovo Local Server Static IP 1) Interface Port1 setup with IP 192.168.2.1 for admin setup 2) Interface WAN with DHCP which get IP 192.168.1.3 I have localhost server (Lenovo Think Server) for application…

Team we created one busines firewall rule and enable port 80.443.8000 But i can possible to acess port 8000 / but 80 and 443 was closed on outside pls help to us thanks in advance

I have followed the video guide for DNAT on https://www.sophos.com/en-us/support/products/xg-firewall/how-to-library.aspx#NetworkConfiguration But inbound packets are being dropped even though I'm pretty sure everything is correct. There is no alias…

Hi all, Creating a port forward or dnat rule to the firewall ip Is is best to port forward to the lan int ip or the wan int ip Thanks, Rob

We have a IIS Server hosted on server. It is accessible over internet but not on lan. Screen shots are attached. It works from outside internet but not from lan. Thanks