allow my static ip to be pinged from the internet

Hi,

have you enabled PING in the ACL for the XG?

Administration -> Device Access.

Ian

this is my configuration by far

i can't ping my interface ip at all

Hi,

I don't understand your firewall rule for ping internal zones because you have said it is an external zone?

I just tried ping to my external interface and it works. Using a LAN ANY WAN ping rule.

Ian

i know my english is not that great but i try to give u an idea again

basically i have a router with a static IP address and i was able to ping that ip from any website or server  outside my local network

after i installed sophos with the configuration u saw in the pictures i can't ping my static IP from outside my local network anymore

in short i want my wan interface IP to be pingable from outside my local network and from internet in general

Hi,

is the router still in the network between the XG and the ISP? Are you using the same address as the router if the router has been removed? Is your ISP likely to have MAC locking to your address range?

Ian

here is how my network is configured :

my router/modem ----- > port 2 in sophos server

lan switch --------> port 1 in sophos server

so yes the router is still in the network , if i removed the router i wont have access to the internet , about the mac locking idk .

Hi,

Is your modem/router in bridge mode or in router mode? If in router mode the XG (firewall) will not see the incoming traffic to your external IP address.

Ian

it's working as a router but there is bridge

Hi Ahmed,

I had a look at the details you provided in the message and need some clarification on your plans for the XG? The router seems to be performing a lot of the functions that would normally be done by the XG.

If you want the WIFI functions move the router inside the XG firewall so you get some protection.

The router is blocking the traffic from the internet address you are using.

I am not sure what you mean by your LAN devices are all using the same IP address?

Ian