Upgrade MR9, SSL VPN and Sophos Connect some ports unreachable

You mean through XG not reachable? 

Seems like your firewall rule is not in place anymore because i assume, you are using the same firewall for VPN (SC and SSLVPN)?

Hi StefanS 

Recently below issue observed but with IPS version upgrade and not with firmware upgrade:

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/116624/the-firewall-blocks-all-ports-from-dnat-rules-except-ports-80-and-443

Please check if your VPN to LAN rule having IPS applied and that is creating a problem for connectivity.

Hi LuCar Toni,
In the corporate network there are servers which e.g. with 172.x.x.x:81 are reachable, since the upgrade no more.
We also see that with other ports 8080, 8081, but RDP works. But you have to say that these are websites (possibly) that are currently failing.
What also see is that in the connection list the request arrives.

Vishal,
that sounds a lot like that, will test it right away.

Yes this is this problem, when is there a fix X.16.46?
Thanks for the quick help

Vishal
i can not find the SID 2301246 in IPS to make an exclusion.

Hi Steafan

Yes signature including the solution is (X.16.46)  already released and you may do the manual pattern update by clicking on "Update Pattern now" if it is not reflected on your XG.

OK, answer me, meanwhile x.16.46 was rolled out and there is the SID.

Thanks for the quick help here.

Hi SteafanS

As of now it seems that particular SID has been reverted in latest update X.16.46 from the previous update X.16.45.