This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block traffic (HTTPS) between vlans

Hi i have an UTM firewall and need to block HTTPS traffic between two networks on the UTM.

Currently i can browse from one interface in vlan A to another interface in vlan B, but i want to block that. Looks like there are no firewall rules which allows the traffic (a block rule is active) but still the traffic is allowed.

I was wondering if the web protection could take over the HTTPS traffic instead of the firewall rules, so i disabled the web filtering option. That doesn't seem to work, traffic is still allowed. I also tried to add a block in the web filtering policies (on IP), but no luck there. When checking the log it looks like no internal browsing is logged.

Any help for pointing me in the right direction is appreciated!

This thread was automatically locked due to age.

0 Vivek Jagad 4 months ago

Hi Bastiaan van Leeuwen ,

Thank you for reaching out to the community, have you tried creating a drop/reject firewall rule between the src/dest networks ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Bastiaan van Leeuwen 4 months ago in reply to Vivek Jagad

Yes i tried that to block everything, didn't work.

After a few tries i found that within the we protection > filtering options > misc the destination network was entered in the 'skip transparant mode destinations'. When removing the network from this list, the website was blocked for Sophos vlans. The site was not blocked for traffic coming from another network (unifi) which is connected to this firewall.

So i guess disabling the web filtering does not switch HTTPS traffic from web filtering to normal firewall rules?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 4 months ago in reply to Bastiaan van Leeuwen

'skip transparant mode destinations' will completely bypass, hence it was not blocking, correct. Thank you Bastiaan van Leeuwen

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel