How do i add a new Zone to the ANY Zone ?

Hi,

when you create the new interface you configure it to be in the LAN type.

Ian

How do i get this Interface to the ANY Zone?

The new Interface is automaticly in the LAN Zone, but not in any Zone.

If i set a firewall rule to ANY, this Interface is not used by the rule.

So i added a new Zone WANE5 and added the interface to this Zone.
Next i need to change the Firewall rule and tell it to use the WANE5 Zone.

But still no Internet Access.

How do i get this Interface to the ANY Zone?

The new Interface is automaticly in the LAN Zone, but not in any Zone.

If i set a firewall rule to ANY, this Interface is not used by the rule.

So i added a new Zone WANE5 and added the interface to this Zone.
Next i need to change the Firewall rule and tell it to use the WANE5 Zone.

But still no Internet Access.

Please post a screenshot of your network interface configuration.

Ian

I dont know what screenshot you need.

If i make a firewall rule i can select the ANY network.

But the LAN Interfaces are not part of the ANY network.
Why ?

Never heard of such an issue. 

ANY Interface should include all interfaces, configured on XG. That is an automatic process in the backend.

Maybe you need to disable the interface and recreate it with the same configuration. (Something went wrong in the creation process). 

I have a PPPoE Interface assigned to WAN, but no Web Surfing is possible over this WAN Interface.

So i added a new Zone WANE5 and assigned the PPPoe to WANE5 Zone.
In the FW Rule i need to add ANY and WANE5 for Surfing the web.

Can you please revert everything to classic WAN for PPPoE and show us the LAN to WAN Rule?

Did you assign MASQ? 

I reverted the rule, the Desktop is my PC.

I only need to change the Primary Gateway to PPoE Interface (Gateway) and Web Surfing fails.

This is the Port E5

This rule does not work? 

Can you verify two things:

Check the outgoing packets on the Interface via tcpdump.

https://community.sophos.com/products/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg

And check, if you see any packets dropped by XG via "drppkt |grep CLIENT_IP"

I see this in the logs...

2019-05-31 15:25:04Firewallmessageid="01001" log_type="Firewall" log_component="Invalid Traffic" log_subtype="Denied" status="Deny" con_duration="0" fw_rule_id="0" policy_type="0" user="" user_group="" web_policy_id="0" ips_policy_id="0" appfilter_policy_id="0" app_name="" app_risk="0" app_technology="" app_category="" in_interface="PortE0" out_interface="" src_mac="48:4d:7e:d7:60:fb" src_ip="192.168.0.16" src_country="" dst_ip="193.99.144.85" dst_country="" protocol="TCP" src_port="63680" dst_port="443" packets_sent="0" packets_received="0" bytes_sent="0" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="" src_zone="" dst_zone_type="" dst_zone="" con_direction="" con_id="" virt_con_id="" hb_status="No Heartbeat" message="Could not associate packet to any connection." appresolvedby="Signature" app_is_cloud="0" Copy to clipboard

And the Tcpdump? 

Because this seems to be only invalid Traffic (so called no issue at all, only another Symptome).