This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Issue with my Firewall Policies

Hi to All SOPHOS Specialist!

I have a weird situation with my Firewall Policies and I need your help. I created one policy to allow selected users to access facebook, youtube and linkedin, the problem is when I tried to test using policy checker it is showing that he's blocked. Below is the screenshot of my firewall Policy. This device is a newly purchased Sophos XG86.

I hope anyone can shed a light on this weird situation.

Thanks

Rodney

This thread was automatically locked due to age.

0 LuCar Toni over 5 years ago

Could you give us the "complete" firewall Rule + the Policy Test screenshot?
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago

Hi Rodney Altamera,

The screenshot you provided shows web policy Allow All which means it will allow access to those websites, unless you have a default firewall rule on top of this rule in screenshot. Please make sure to move this rule on top and check.

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 Rodney Altamera over 5 years ago in reply to FormerMember

Hi H_Patel,

Sorry for the late response, busy week. I placed the firewall policy on top and check if can access facebook but it is blocked. In my firewall policy I allow all. Can you help me what is causing this issue. below is a screenshot.

Thanks

Rodney
Cancel
Vote Up 0 Vote Down

Cancel
0 Rodney Altamera over 5 years ago in reply to FormerMember

Hi H_Patel,

I found the problem. At the bottom Source Zone option you need to select the VLAN ID. If you do not select and leave it at automatic then it will not work. The IP address 192.168.100.43 is allowed to view facebook.

The only weird thing in my main firewall in our main office Sophos XG310 if automatic is selected it will be able to detect. The Sophos having issue is my remote site sophos xg86.

Thanks

rodney
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to Rodney Altamera

Hi Rodney Altamera,

I would suggest you to Open a Support Case and PM me the case number.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel