It takes time to get access to the internet

Hi,

trying using firewall rules instead of routing. Also is the XG in the DNS update path?

Ian

Hi,

I used the lan to wan firewall rule.

Also, I confirmed the DNS settings and also confirmed the update path, but I did not improve it.

Thanks.

Hi,

next thing to look at is your network connection settings, are both ends set to auto-negotiate with the same MTU. Is the cable a straight through one?

Ian

Hi,

Both ends were set to the same MTU and auto negotiation, and the cable was straight.

Thanks.

Hi,

the next question is are you specifying a network range in your firewall which is different to your DHCP scope? When you look at the log viewer while testing access what errors if any do you see?

Ian

Hi,

the next question is are you specifying a network range in your firewall which is different to your DHCP scope? When you look at the log viewer while testing access what errors if any do you see?

Ian

Hi,

DHCP is operating on L3SW located on the LAN side of the firewall.

Therefore, there is no DHCP setting in XG.

The IP address of the LAN side Internet of XG is specified in L3SW as the next hop of default route.

I checked the log viewer during the test but there was no deny log.

Is there no problem with this answer?

I am sorry if I am wrong or missing.

Thanks.

Hi,

sounds like a configuration issue with the L3SW you should not need a route in the L3SW if you have the gateway advertised as part of you DHCP settings.

Ian

Hi,

There are two routes, one for Azure and one for the Internet, so we set the default route for L3SW.

Thanks.

Do both go through the XG? 

If you do a tracert where does the traffic go.

Ian

Hi,

Only Internet communication goes through XG.

Thanks.

Try the new MR4 which will be released in Apil 8.

Reference: comments in https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-17-5-mr4-released#pi864299340=2

Hi,

Thank you for the information.

When a new MR4 is available for download, check to see if it can be applied and improved.

Thanks.

Hi Jellie,

part of his problem is he is using the L3SW (Netgear switch) to do routing before applying the traffic to the XG.

Ian

Hi lan,

I returned from the XG to the Fortigate 90D I used before and the symptoms disappeared.

The configuration other than XG has not changed.

Hirotaka

Hi Hirotaka,

please provide a network diagram and traffic flow.

Ian