Sophos XG when switch connected to LAN interface no Internet

I dont get very well the scenario and the ISP router DHCP (is he providing NATed internal segment?) but having the same segment in both sides on the XG is not a good idea.

Correct, the ISP router is doing the NATed segment.
we have tested sophos with DHCP on and off. it has NAT rule configured.  Same results on both scenarios

the strange thing is why on laptop it works ok and when connected to the switch it no longer gives internet.

Should the ISP Router be on bridge mode so the UTM can be in charge of everything?  Thanks!

It would be easier to just change the LAN segment on the Sophos to any other network.

And put the router in bridge mode, that will save you grief in the future.

Ian

Great I will try that! So I can just ask the ISP to configure it as bridge? Is it better if they use a different IP like 172.16.16.1 for the router and the Sophos LAN 172.16.0.1 ?

Great I will try that! So I can just ask the ISP to configure it as bridge? Is it better if they use a different IP like 172.16.16.1 for the router and the Sophos LAN 172.16.0.1 ?

Like rfcat_vk mentioned, having the ISP device in bridge mode will save you from future hasle and problems (double nating, opeing ports, ipsec, etc).

Changing the sophos lan subnet is the dirty and fast way to not have problems, but surely not the best solution nor future proof one