Filtering

Hi Nicholas,

Check the following settings and post screenshots for the same.

Configure the Internal Network host in Allowed Network for DNS global settings.

Add Internal Network in the Allowed Network for Web Protection global settings.

If the websites are gettings blocked, do a policy helpdesk test and verify which Filter Action blocks the request. Allow the website from the same.

Thanks

Hi,

I tried what you said but everything you said seems to be set okay. The only thing I can think of is the External (Wan) down interface isn't showing any activity, perhaps I have that configured wrong? I have BT Openreach Fibre to the Cabinet in the UK. Also how will the incoming network traffic know to pass through the UTM, how do UTMs work exactly?

Thanks for your help

Nicholas

By the way the UTM sees both the Wi-Fi and Ethernet as Ethernet networks as I'm running it in a VM

The UTM is a specialized firewall that really needs at least 2 network cards. The wifi in most hardware setups is not supported at all in Sophos UTM. A very few of them could be supported as an access point, but still not as a connection to another wifi network, it's not functioning as a normal wifi card in your everyday computer.

Is that the case even in a VM?

No, in a VM you can create the UTM but then you can also create 2 NIC's using the virtualization software. You can then see both NIC's during setup and setup 1 as internal interface and the other as your external interface.

So in that case I do have 2 NICs? I did see them both during setup but I left the external WAN interface because I didn't know how to configure it.

I think in the interfaces screen that you showed us, you can in that case add another interface. Call it External (or WAN or whatever) and select the remaining NIC as the underlying hardware.

In the VM-host you need to connect this virtual NIC to your internet connection and you can configure it in the UTM just as you would with a normal router (or PC), I don't know your provider, so I don't know how to set that up exactly.

Can I set the UTM to automatically get the WAN settings from my Router. I use my ISP provided modem/router unit.

That depends on how your ISP modem/router is setup. But usually if it's also a router (where you could also connect a computer that then automatically works), you can indeed automatically have the interface setup by configuring it as a DHCP interface

By selecting "Dynamic IP" the interface will request an IP-address from your modem. Also make sure IPv4 Default GW is selected so your UTM knows where to send internet requests.

Hi,

Thanks for the guide although it doesn't seem to pick up an IP address from my router which is weird because apart from that DHCP on my network works fine. On my UTM IPv6 Default GW isn't an option but does that matter as IPv6 is not used much at the moment? Is there anyone here in the forums who uses Sophos UTM Home with a BT Infinity internet connection?

Also just checking clients that should have content controlled by the UTM don't have to be plugged in through the UTM do they? As long as the clients are connected with the same LAN with the same subnet etc it should be fine? As I say this is the first time ever that I've tried to implement an advanced network security system.

Nicholas

Clients don't have to be physically connected to the UTM. Being in the same subnet will suffice. They do however need the UTM as their default gateway so traffic to the internet travels through the UTM.

I'm afraid I cannot help you further with your Infinity connection. IPv6 doesn't have to be turned on if not used.

Clients don't have to be physically connected to the UTM. Being in the same subnet will suffice. They do however need the UTM as their default gateway so traffic to the internet travels through the UTM.

I'm afraid I cannot help you further with your Infinity connection. IPv6 doesn't have to be turned on if not used.