Webfilter Fehler. Webfilter with wrong Gateway IP

Go to Administration > Admin and User Settings >  When redirecting users to the captive portal or other interactive pages

You can put in the hostname or ip you want to use.

Hello, i know this Option, But i want different ip adresses. It should be the Gateway Sophos on each lan.

XG Will always use the hostname IP to redirect. Use a FQDN to resolve the Cert issues. 

Witch Port is it for the Block Site?

Blockpage will be loaded by the hostname of the XG. So the hostname is used by XG to redirect the client to this blockpage. Its 8090

Ok, so i have to add a Firewall rule from the lan to xg Hostname with only Port 8090 für the blockpage?

No you dont have to do this. The XG will simply replay from this address. This system can intercept the request on all interfaces without the need to have a firewall rule. Except this traffic to this IP is blocked by some other device or routed differently. 

Try to setup a FQDN for the XG anyways. It will resolve a lot of your frustration. 

Hi, i dont understand

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/learningContent/HostsServicesFQDNHost.html

how it will work with the xg block site. please help

I mean, change the hostname of the XG to a DNS/FQDN of your domain. Instead of having your 192.168.12.254 you can setup xg.domain.local. 

This DNS can be registered in the DNS of your AD. 

Then register a certificate for this DNS record (internal or external) and push it to the clients. 

I assume, the issue of your block page is not showing, is caused by the browser in the first place, as the website is not secure etc. 

there is a hostname in our configuration

but the users on the 

192.168.20.0/24 do not have contact to the local dns. they are separated. they only have traffic to the sofos xg port / gateway 192.168.20.254 an than to the lan port