This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM 8.960-9 - Firewall-Load Balancer rule not forwarding traffic

I am new to Sophos and do not know how the firewall (FW) and load balancer (LB) features work.  Here are the details and the issue I am having.

FW Version

8.960-9

Interfaces

DMZ                      192.168.3.253 - eth1 - external

DMZ2                    192.168.3.250 - eth1 - external - Additional interface

DMZ3                    192.168.3.249 - eth1 - external - Additional interface

Internal                  192.168.4.254 - eth0 - internal

Real Servers

svr61                     192.168.5.61

svr62                     192.168.5.62 - offline

svr63                     192.168.5.63 - offline

FW -Rules

Rule 2:                  Any IPv4              -----HTTPS ----->               DMZ, DMZ2, DMZ3

Rule 3:                  Any IPv4              ---HTTP/HTTPS -->           DMZ3

Rule 19:                srv61,svr62         -------Any--------->           Any IPv4

SNAT

Rul 5:                                     Any        -----HTTP ----->                srv61

Rul 6:                                     Any        -----HTTPS ----->             srv61

Rul 7 (disabled):                Any        -----HTTP ----->                 srv63

Rul 8 (disabled):                Any        -----HTTPS ----->              srv63

It appears that traffic is not being forwarded to the real server or back through the external interface, I cant determine which.  At one point the traffic was hitting the SNAT for srv62 which is offline.  I disabled that SNAT but traffic continued disappear.  I created real server srv63, added it to the LB rule and removed srv62 from the rule.  At this point all traffic was forwarded to srv61 as expected.  The FW has since stopped accepting HTTP and HTTPS requests from some external sources but not all.  I am not sure if this is enough information, I was hoping someone had seen something similar and could provide some insight. 

Please let me know if you need more information.

Thanks in advance for the help.

:26735


This thread was automatically locked due to age.