This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Missing options (Forward Type) in DNAT/FullNat/LB

Hi,

I am following the online help text to create a business rule of type "DNAT/Full NAT/LoadBalancing". Regarding to this document:

http://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/tasks/DNATFNATLBRule.html

I should be seeing an option called "Forward Type" from which I can select "Port, Port Range, Port List or Everything". This option does not appear. What am I missing?

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 6 years ago

Hi,

looking at the KBA, you appear to need to fill in some of the fields for the additional menus to appear.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 cryptochrome over 6 years ago in reply to rfcat_vk

KBA?

I tried everything. No matter which options I choose or whatever I fill in, that option does not appear.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to cryptochrome

Hi,

I tried a lot of things to no avail. You might like to review the links in this thread?

https://community.sophos.com/products/xg-firewall/f/initial-setup/110481/xg-setup-guide-for-new-users

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to rfcat_vk

Seems like the Online Help is kinda old.

But what you are trying to archive? What do you need, because the functionality is still there.
Cancel
Vote Up 0 Vote Down

Cancel
0 cryptochrome over 6 years ago in reply to LuCar Toni

LuCar Toni said:

But what you are trying to archive? What do you need, because the functionality is still there.

No particular use case at the moment, I am just exploring my options. But one thing comes to mind: Full 1:1 NAT without port forwarding (e.g. D-NAT incoming traffic from 1.1.1.1 on the WAN interface to 2.2.2.2 on the LAN interface). With the business rule that says "DNAT/FullNAT" it appears I will always have to specify ports.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 cryptochrome over 6 years ago in reply to LuCar Toni

LuCar Toni said:

But what you are trying to archive? What do you need, because the functionality is still there.

No particular use case at the moment, I am just exploring my options. But one thing comes to mind: Full 1:1 NAT without port forwarding (e.g. D-NAT incoming traffic from 1.1.1.1 on the WAN interface to 2.2.2.2 on the LAN interface). With the business rule that says "DNAT/FullNAT" it appears I will always have to specify ports.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data