ip with a strange port on the captive portal

Hi Adem SI 

This indicates NTLM related authentication.

Please confirm NTLM is off on firewall on respected zone if you do not want to use the same.

https://community.sophos.com/kb/en-us/123149

Oh Good, I disabled NTLM in the Firewall, but I still have errors and I can't ping the server 8.8.8.8 and when I try to do apt-get update it returns the following error

but I have other linux servers that don't have this problem

Hi Adem SI 

Now NTLM error disappeared, Based on last snapshot it seems this server traffic is passing via identity based rule which required end server or machine to be live users. (As traffic may be getting blocked as machine is not reflecting in live user list of XG)

As of now you may check the current rule from which server traffic of Internet is passing and if above is the case then you may create a clientless user for this server or machine IP.

OR Another way is to create IP based rule for this server on top to allow internet traffic and confirm the status.

Hi Adem SI 

Now NTLM error disappeared, Based on last snapshot it seems this server traffic is passing via identity based rule which required end server or machine to be live users. (As traffic may be getting blocked as machine is not reflecting in live user list of XG)

As of now you may check the current rule from which server traffic of Internet is passing and if above is the case then you may create a clientless user for this server or machine IP.

OR Another way is to create IP based rule for this server on top to allow internet traffic and confirm the status.

As the image below shows, the rule allows traffic from the server to pass, this is a lan-wan rule dedicated only to servers and is not based on identity,  so it is strange how it behaves

Thank you for your attention, it is already solved, there was a rule with identity above the exit rule for servers that created this bus