This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Deny access between to networks on one interface

Hi.
We have sophos sg 310 UTM. We have internal networks 192.168.0.0/23 and 192.168.4.0/24 on one of the interface. When i try to connect wifi router which is in 192.168.4.0/24 via web interface example: https://192.168.4.2 from network 192.168.0.0/23 connection is success. We need block any connection from 192.168.0.0/23 to 192.168.4.0/24 except one ip(192.168.0.3) address. Is it possible via firewall rule? if yes, what should it look like?

This thread was automatically locked due to age.

Parents

Vivek Jagad over 2 years ago

Hello Besik Chitidze,

Thank you for reaching out to the community, Firewall rules work from top to bottom fashion, you if the traffic for both the subnets do reach on the FW i.e. [192.168.0.0/23 to 192.168.4.0/24] then you may create a FW rule with both subnets in source and destination with action drop/reject and then create another rule on top of that rule for [192.168.0.3] with the action allow.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

Vivek Jagad over 2 years ago

Hello Besik Chitidze,

Thank you for reaching out to the community, Firewall rules work from top to bottom fashion, you if the traffic for both the subnets do reach on the FW i.e. [192.168.0.0/23 to 192.168.4.0/24] then you may create a FW rule with both subnets in source and destination with action drop/reject and then create another rule on top of that rule for [192.168.0.3] with the action allow.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data