This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

firewall rules are not work

cheikh ka over 5 years ago

Hi all,

i have an UTM 9 sg210, i set 5 vlan on my switch, i permit all on the switch

and create some sub-interface from one physical interface on the UTM

i set interface vlan for each sub-interface

currently Sophos is blocking everything between vlan

but when i set firewall rule for allowing Something between vlan i does not work

what i want is to control trafic between vlan on the Sophos UTM 9

someone can help for that?

This thread was automatically locked due to age.

Parents

0 dirkkotte over 5 years ago

Do you configure the vlan trunc at switch interface correctly?

Try to ping sophos interface (default gateway) from device connected to vlan. Do this with every vlan.

You should reach the sophos interface from within the vlan.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 cheikh ka over 5 years ago in reply to dirkkotte

At switch port i have a trunk toward the UTM interface

From connected device i can ping the UTM interface which is the default gateway
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 5 years ago in reply to cheikh ka

you are able to ping from every VLAN to default gateway...?

Open Firewall-live-log while trying to access something over Firewall.

i would try a ANY-rule first. Source any - service any - destination any.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 Eliza Brown over 5 years ago in reply to dirkkotte

Hello,

Just checkin' to see if the information provided was helpful.

Try this as an outbound rule.

But be aware that it will block much more than your browser.

_____________________________________________________________
routertable
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Eliza Brown over 5 years ago in reply to dirkkotte

Hello,

Just checkin' to see if the information provided was helpful.

Try this as an outbound rule.

But be aware that it will block much more than your browser.

_____________________________________________________________
routertable
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data