This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing traffic conditionally over WAN ports

Hello all,

my company has Sophos firewall XG115, I have setup a VPN on it.

there are 2 WAN interfaces attached (2 different ISPs), currently, they have weight/priority 40,50 respectively and both are active.
I want to conditionally(on the basis of destination port) route traffic coming over VPN through different WAN interfaces, how can I achieve this?

For eg. If client on VPN tries to connect to port 8080 of ultimate destination, it should go through a specific WAN interface (specific ISP)

This thread was automatically locked due to age.

Parents

0 Keyur over 5 years ago

Hi anant trivedi

As per my understanding, you want to control client VPN traffic, if it is originated for specific service from the client system, it should be in through specific ISP, please correct if I am wrong. Unfortunately, VPN traffic will be served on the ISP on which the client is connected.
Cancel
Vote Up 0 Vote Down

Cancel
0 anant trivedi over 5 years ago in reply to Keyur

No, the thing is the client is connecting to VPN and then through VPN to a servers specific port, so from VPN the connection exists to internet through WAN port and we have 2 WAN connections (2 ISP's).

, when client is trying to connect to 8080 port of a specific service hes not able to do that , even when vpns ip(both WAN interfaces ip) is whitelisted on destination server.

other ports like ssh are working.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 5 years ago in reply to anant trivedi

Hi anant trivedi

Sorry but I am not able to fully understand your requirement. Could you please explain the traffic flow to understand the scenario? It would help us to assist you better.
Cancel
Vote Up 0 Vote Down

Cancel
0 anant trivedi over 5 years ago in reply to Keyur

Sorry for the confusion my end goal is :
i want to enter policy rules that will route the traffic for a particular port/ports through a particular WAN interface , as opposed to the traffic being distributed over 2 WAN interfaces according to the weight value.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 5 years ago in reply to anant trivedi

Hi anant trivedi

Please refer to the article - https://community.sophos.com/kb/en-us/123579#Service-based%20routing
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Keyur over 5 years ago in reply to anant trivedi

Hi anant trivedi

Please refer to the article - https://community.sophos.com/kb/en-us/123579#Service-based%20routing
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data