Allow Authentication services over WAN Zone

Question

Hello folks, 
 I have the following scenario where I have a HO and two BO where I have a direct Fibre connected between HO and BO using the port 3 using WAN zone, where I have the routing between these peers. It is working perfect. But Im having a bit problem. I have a Domain Controller in HO and I would enable the STAS services to authenticate all points. But when STAS from HO try communicate to any BO XG devices the connection is dropped (port 6060 UDP) because the authentication services is not allowed over WAN Zone. Is thre anyway to allow this over WAN Zone? 
 Regards Carlos

HardikR · Answer

Hi Carlos, Is there any specific reason to set Port3 Fiber connection as WAN zone? By default authentication does not work on WAN zone. Alternatively you can set Port 3 as custom LAN zone (such as P2P zone) and then enable authentication for P2P zone. 
 
 This article will help to understand Zone and create custom zone support.sophos.com/.../KB-000036665

Allow Authentication services over WAN Zone

Top Replies