This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VM setup for XG Firewall Home Edition

RayGo1975 over 6 years ago

I am using ProxMox VE on an HP pavilion laptop with one internal NIC and a USB-NIC adapter.

In my ProxMox setup I have the internal NIC (eno1) bridged to vmbr0 and the USB-NIC (enx.....) bridged to vmbr1. In creating the VE for Sophos XG Firewall Home Edition I have 6 GB of memory, 64 GB of disk space and two Network Interfaces, net0 (vmbr0) and net1 (vmbr1) see attached screen shot of the VM configuration.

In the e-mail I got with my serial number it says:

1. Install the downloaded image on your preferred hardware or virtual environment (Note the installation will overwrite the previous operating system and all files).

2. Connect the WAN interface (port 2) on the device to your internet connection.

3. Connect a computer to the LAN interface (port 1) and access the setup screen at 172.16.16.16:4444 (Note: It may take a few minutes for the necessary services to start before the setup screen is ready)

I have done number one. but I have not figured out which interface is port 1 and which is port 2. I have tried plugging the internal NIC (eno1) into my router and the USB-NIC into my laptop I am using to manage the VM. That did not work so I tried it the other way around, still no luck.

When I try to go to the IP address given I get "This site can't be reached".

You really need to write some instructions for the home user who is clueless about networks and things related to firewalls.

Here is a screen shot of my ProxMox network setup:

Any and all help is greatly appreciated.

This thread was automatically locked due to age.

0 RayGo1975 over 6 years ago in reply to RayGo1975

Firewall was set to no, did not need to change it.
Cancel
Vote Up 0 Vote Down

Cancel
0 TrevorSymonds over 6 years ago in reply to RayGo1975

Give yourself some credit....you have done amazingly well to get proxmox up and running as it is not easy. When you throw sophos into the mix, its rocket science
Cancel
Vote Up 0 Vote Down

Cancel
0 TrevorSymonds over 6 years ago in reply to RayGo1975

Ok...mmh so when you click on hardware on the Sophos VM and look at the NICS.....if definelty DOES NOT say Firewall=1?
Cancel
Vote Up 0 Vote Down

Cancel
0 RayGo1975 over 6 years ago in reply to TrevorSymonds

On the hardware tab it does say firewall=1 for the NICs but in sophos firwall>options it says no
Cancel
Vote Up 0 Vote Down

Cancel
0 RayGo1975 over 6 years ago in reply to RayGo1975

I may have found it. in the PVE firewall>options it said yes. I changed it to no and am rebooting.
Cancel
Vote Up 0 Vote Down

Cancel
0 RayGo1975 over 6 years ago in reply to RayGo1975

This is strange. both PVE>firewall>option and sophos>firewall>option are set to no. but even if I delete the NICs in sophos and put them back in they come back as firewall=1.
Cancel
Vote Up 0 Vote Down

Cancel
0 RayGo1975 over 6 years ago in reply to RayGo1975

found it... when you go into edit the network device on sophos there is a little check box that is labeled, firewall. as soon as I unchecked it the firewall=1 went away.

going to try the ping test again.
Cancel
Vote Up 0 Vote Down

Cancel
0 TrevorSymonds over 6 years ago in reply to RayGo1975

You might have to restart sophos....when you change stuff on the VM nics.....sometimes it doesnt take till you shutdown the VM and restart it....

But as long as the sophos VM doesnt say firewall=1 after reboot or after NIC change you should be OK
Cancel
Vote Up 0 Vote Down

Cancel
0 RayGo1975 over 6 years ago in reply to RayGo1975

I really hate to say this but the ping test failed.

I had all three network devices on sophos set to vmbr1. started the sophos VM and started a never ending ping to 172.16.16.16 on my control PC

I then changed each network device from vmbr1 to vmbr0 one at a time and waited for at least three timeout messages on the ping. never got a successful ping reply.

I will be sitting down to dinner soon and I will not be able to get back to this until tomorrow afternoon around 1:00 PM EDT.

I can not thank you enough for all the help you have given me. And the knowledge you are imparting.
Cancel
Vote Up 0 Vote Down

Cancel
0 TrevorSymonds over 6 years ago in reply to RayGo1975

Go and take a break....you might think of something... one thing think that you can try is setting the IP on the CLI, meaning in the proxmox console... this will allow you to set the IP for the LAN interface to match you 192.168.1.x network.... another easy option is to set up a small linux VM with a desktop on proxmox and give it access to the same vmbr0 interface.... then you can connect using the included firefox.... then you dont even have to worry about network cards...as it will all be internal to proxmox....

I have been running Sophos for about 7 years.....and proxmox for about 5.... never had a single failure or blip....runs great....so its well worth the effort if you can get it running.
Cancel
Vote Up 0 Vote Down

Cancel