Hello,
Since we wanted to completely redo a firewall, we installed the XG OS on a Sophos SG 125 Rev. 1 and created the configuration there. When we were done, we flashed our Sophos XG 125 Rev. 3 with the latest firmware 18.0.5 MR-5-Build586 and applied the configuration there.
The default SNAT rule didn't work, so we created a new one with exactly the same settings and also a S2S VPN to Azure could be connected, but only after hours of traffic.
The firewall itself starts in failsafe mode with the reason "unable to apply nat rules".
Can the problem come from the different name of the interfaces ? At SG they are internally called ETH0 etc. and at XG Port1 etc.
This thread was automatically locked due to age.