EXCLUDING ONE DEVICE FROM POLICIES NOT WORKING

Hi,

pity about the  big test.

There is an unacknowledged bug in the current version (at the very minimum) of XG where you cannot provide connectivity using the IP address of a device in the Network field. I have found you need to create a clientless user and use the match known user field to identify the device.

Ian

can you please show me how to creat a clinetless user for the device ?

Hi,

please post a copy of your rule and the failing log entries.

Ian

how i can get the failing log entries ?

Hi,

you open logviewer and filter on the ip address of your pc.

Ian

how i can get failing log error ?

you need to change the source network as I advised to your LAN/any then try again.

Ian 

If you tracery from that pc where does the result show as a fail?

ping from sophos console to 8.8.8.8

unable to ping router GW from PC

here is the schema 

PC1 "192.168.17.200"--------->"192.168.17.254"SOPHOS"192.168.1.108"--------->Gateway"192.168.1.1"------> INTERNET

is there something to do with NAT ?

is there something to do with NAT ?

i found the solution i created a rule of NAT following this KB and that solved the issue thank you very much.

docs.sophos.com/.../CreatingFirewalRuleWithLinkedNATRule.html