XG SSLVPN Clients are applied to SNAT, while they shouldn´t

Problem still exists. Could this be related to the expiration of the essential firewall module? What happens when it expires? Does anybody know? In the moment we still have a trial, but on the end, we will have only the base license active.

Hi seroal,

Thank you for the update. 

You would require the base firewall license for VPN to work. If the license expires, you might see unexpected issues. I would suggest you update the license on your firewall first. 

Check out the following document for more info on licensing: Sophos XG Firewall: Licensing guide.

Thanks,

Ok, I see. In the moment it looks like that:

So nobody can say, what actually happens on 25.03.2021?

So am I safe to migrate the old UTM base License? Are there any interruptions to be expected?

Thanks a lot.

Ok, I see. In the moment it looks like that:

So nobody can say, what actually happens on 25.03.2021?

So am I safe to migrate the old UTM base License? Are there any interruptions to be expected?

Thanks a lot.

Hi seroal,

Once the license expires on your firewall, features that fall under the specific module will stop working. The VPN feature falls under the base firewall license and since it’s expired, VPN won't work as expected. 

Thanks,

In parallel I asked our Presales Team and I got some interesting answers... So my original questions seems to be answered aswell, because a XG without base license is NATTING any connection through the firewall. So this is our issue. We will now migrate the UTM Base License.

Thanks