Client-Isolation across Accesspoints?

It works for the first time.

If I connect again to the same AP and when back to a different it’s doesn’t work.

Enable -> disable client isolation it works again.

I run at home the home license. So I don’t have a reseller to connect.

Any other way to make a case by Sophos?

Hello Markus,

Thank you for contacting the Sophos Community.

I can try to replicate the issue and get GES to investigate, I just to make sure I am on the same page as you!

Could you please tell me how are you testing connectivity between the clients is this trough Ping or https://x.x.x.x or a different method?

Are the SSID in a Separate Zone or bridge to LAN?

Does your Firewall is only configured for Gues Network >> Service = Any >> Destination = Any IPv4?

Regards,

Hello,

I noticed the problem at my sonos speakers.

So if I connected to a different AP no control from with the iPhone App are possible.
After that I us a ping tool iNetTool to ping the speaker. No ping possible.

If I connected to the same AP as the speaker ping and control are possible.

If I connected to a different AP I switch Client isolation to enable -> Save. Then I switch Client isolation Disable -> Save. Then it works from different AP.

SSID in the are the Same I have just one WLAN = SSID running. So I use “bridged to AP LAN”

So ware I would say no firewall rules are necessary.

Thanks a lot

Markus

Hello,

did you here something new?

Best regards

Markus

Hello Markus,

Thank you for the follow-up.

Sorry, I forget to respond.

It seems like this is a limitation on the AP. It looks like the documentation needs to be updated. 

Regards,

Really....

I think that is a bug in the AP - Software.

Because, if you switch client isolation on -> off it works fine up to you lose the connection to the AP for example - out of range.

If you in range again. No connection to the client that connect to a different AP.

client isolation on -> off it workS fine again.

So I think problem I the software.

Best regards

Markus

Hello Markus,

Let me bring these comments to GES and let you know what they say next week!

Regards,

Good afternoon,

Same happens to our environment.

Running Sophos XG 18.0.1 MR-1-Build396 and using AP55 and APX320.

The workaround doesn't work in our case (enabling/disabling the Client Isolation.

WORSE thing is we also lost access from LAN to WiFi!

Hello,

do you have some good new now?

Best regards

Markus

Hello Markus,

Thank you for the follow-up.

I brought this to GES, but they said this is expected. 

However, if you could open a Case ID and send it to me via PM and enable the Support Access. 

I could try to gather what they have asked to see if DEV can confirm the behaviour, as of now they are saying this is a limitation.

Regards,