This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall fails to block an established UDP connection...

Hello Guys,

I am have a weird situation here. I have a PC communicating with a server, both connected to my Sophos Firewall (Firmware: 9.100-16 - not an appliance).

I have a Rule that allows this connection, and it works. Without that Rule, the connection cannot be established. So far so good.
Once established, however, the communication continues even if I disable that rule, or add a rule above it to block that connection. [:S]
It just keeps on working and there doesnt seem to be a way to block it if I wanted to...

I tried it using a PC connected via the Internet and I can even disable the DNat Rule and the connection still continues. Only new connections are being blocked. Is this an expected behavior? Doesnt seem right to me.

Greatbyte


This thread was automatically locked due to age.
Parents
  • Its a regression introduced during 9.1 development.
     It will be fixed soon. 

    He said that over 10 weeks ago, but I don't see anything about it in the KIL.  This is another reason that I haven't yet "blessed" V9 for upgrading from V8 for all of my clients.  If anyone having this problem has a paid license, please ask your reseller to submit a Support request reporting this bug.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Its a regression introduced during 9.1 development.
     It will be fixed soon. 

    He said that over 10 weeks ago, but I don't see anything about it in the KIL.  This is another reason that I haven't yet "blessed" V9 for upgrading from V8 for all of my clients.  If anyone having this problem has a paid license, please ask your reseller to submit a Support request reporting this bug.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data