Sophos SG135 WAN side firewall configuration

Hi Budgie2 ,

Thank you for reaching out to the community, use destination network as "Any."

Hi Vivek, Many thanks for the answer but I am not clear why ths is the right solution.   Please can you explain why I cannot use the WAN (Network) connection which seems more logical. 

Hi Vivek,

Many thanks for the reply.  Please can you explain briefly why using the destination "any" is correct.  It seems more logical to set the destination to WAN Ethernet.  Surely this would be more secure?

Hi Budgie2External WAN network is your external IP network for the Sophos UTM, if it was your edge firewall this would be the address range from your ISP. Where as network -> any (or whichever service you want) -> Internet IPv4    

Hi Vivek and very many thanks.  I understand now.  As I have it set up all my subnets are configured from the WebAdmin on the UTM.  I have each subnet with a static ip from within a defined range of addresses not relased for dhcp but they use the ip address of the subnet for the gateway and the UTM dhcp for connection to the WAN so from what you say I have it right.  Many thanks.

So far so good but I have a much bigger problem on which I need help.  Should I continue on this thread or start another?

Request to mark this as resolved and start another Budgie2