This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SOPHOS XG86 Issue with SDWAN Routing

Hi to all Sophos Experts!

I would like to share my experience with my SOPHOS XG86 Firewall. I tried to create a new firewall policy after updating the firmware to v18. I did some test and I encountered a weird issue with routing wherein when I selected "Any" in the "Destination Networks" in SD-WAN Policy routing. The PC IP Address I assigned to the said Routing Policy cannot connect to the internet. When I tried to specify my local subnet in the "Destination Networks" 192.168.100.0/24 the said PC was able to access the internet. It is a bit weird since in our main firewall XG310 with the "Any" option it is working.

Does anyone here have any idea what is wrong with my setup.

Below are some sample screenshot.

Below is my NAT Policy

Thanks

rodneyaltam

This thread was automatically locked due to age.

Top Replies

Rodney Altamera over 3 years ago in reply to FormerMember +1 suggested

Hi Yash Kothari, I tested using the suggestion of emmosophos, now working. Thanks again for your immediate support. We greatly appreciate your fast response. rodney

Parents

0 emmosophos over 3 years ago

Hello Rodney,

Thank you for contacting the Sophos Community.

If you do a packet capture in the GUI what do you see when the computer tries to access the internet or a Ping?

What is the Matching criteria in the NAT rule?

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Rodney Altamera over 3 years ago in reply to emmosophos

Hi Emmanuel,

Sorry for the late response. I checked this and it goes to the Test FW Rule. The problem it is not going thru PLDT (Primary ISP). The problem it is routing thru the DCTECH(backup ISP). It is weird since on my Sophos XG310 this kind of issue doesn't exist.

Thanks.

Rodney
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 3 years ago in reply to Rodney Altamera

Hello Rodney,

Thank you for the screenshot.

Can you share a screenshot of your NAT rule configuration?

Regard

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 3 years ago in reply to Rodney Altamera

Hello Rodney,

Thank you for the screenshot.

Can you share a screenshot of your NAT rule configuration?

Regard

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Rodney Altamera over 3 years ago in reply to emmosophos

Hi emmosophos,

I already posted the screenshot for the NAT rules.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel