Sophos Firewall

Discussions XG330: No traffic between LAN and DMZ even if a rule is place. Packet filter Violation Reason Firewall

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
+1 person also asked this people also asked this
Locked Locked
Replies 6 replies
Subscribers 39 subscribers
Views 787 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG330: No traffic between LAN and DMZ even if a rule is place. Packet filter Violation Reason Firewall

Julian Cast over 3 years ago

Hello !

We trying to understand this strange behavior with our firewall.

I created this rule to be large : AFDW16 : Source LAN 192.168.150.28 Dest e_All

Rule on the top

Packet Capture

The ping via the diagnostic tool work great

Firewall Log

Can you help me to troubleshoot that?

Thank you !

This thread was automatically locked due to age.

Top Replies

Julian Cast over 3 years ago in reply to LuCar Toni +1

Hi LuCar! No : Thank you for your help

Parents

0 LuCar Toni over 3 years ago

Do you have a SD-WAN Rule aktiv?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Julian Cast over 3 years ago in reply to LuCar Toni

Hi LuCar!

No :

Thank you for your help
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 Julian Cast over 3 years ago in reply to LuCar Toni

Hi LuCar!

No :

Thank you for your help
Cancel
Vote Up +1 Vote Down

Cancel

Children

0 LuCar Toni over 3 years ago in reply to Julian Cast

Looks like your Firewall Rule 51 dropping the traffic. So maybe your Firewall Rule on Position #1 is not hitting.
Could be the filter wrong?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Julian Cast over 3 years ago in reply to LuCar Toni

I searched everywhere. We created Vlan and select the good destination zone with any to be large...
Cancel
Vote Up 0 Vote Down

Cancel
0 Julian Cast over 3 years ago in reply to LuCar Toni

I can ping another server in the same Vlan with the same rule !

Note that we can see the username in this case... (there is not filter on the user )

Thank you!
Cancel
Vote Up 0 Vote Down

Cancel
0 Julian Cast over 3 years ago in reply to Julian Cast

Up :)
Cancel
Vote Up 0 Vote Down

Cancel