New to Sophos XG (migrated from UTM9) and need to allow some devices outbound

HI,

you can setup a firewall rule that only applies to the IP address of your son's PS4 that does not use the http proxy.

Source LAN -> son's PS4 IP address -> WAN -> any -> allow -> log -> MASQ.

Ian

HI,

you can setup a firewall rule that only applies to the IP address of your son's PS4 that does not use the http proxy.

Source LAN -> son's PS4 IP address -> WAN -> any -> allow -> log -> MASQ.

Ian

Thanks for the super quick reply. that's exactly what I did but the rule has zero traffic and didn't seem to apply. It's at the top.

To verify the issue, I went into my default rule and deselected "Scan HTTP" and he can now download. This is temporary.

The rule at the top is like so:

Action: Accept

Source > Lan > Son's PS4 IP > Wan > Any > Allow 

Scan HTTP is off

Intrusion Prevention is None

Web Policy is "Allow All"

Rewrite Source address is checked

Use Outbound Address is MASQ

Log Traffic is set

Here are some pics:

So I deselected "Identity "Match known users" and it seems like it's getting traffic now. 

He started playing another game so I now have to wait... I'll re-enable http scanning on my default rule and see if downloads still work.

stay tuned :)

Ed

this fixed my issue :)

V17.5 will disable Match User based per default. So you / other wont run into issues like that.