This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

how to allow a printer to communicate externally via SSL

Hi to all,

I'm pretty new with Sophos XG Firewall.
I have a networked printer via LAN that needs to communicate with the outside to send status reports to the control panel via SSL.
Is there a way to allow this on the firewall? My idea is to create a rule that only allows outgoing traffic from the printer to the control panel using Printer_IP: port match

Thank you all

This thread was automatically locked due to age.

0 LHerzog over 3 years ago

I suggest you create a MAC address host for the printer, and create a firewall rule with it and web proxy enabled but without using DPI or SSL scanning. Just check the URL it is using.

Or you could get the information, to which FQDN the printer is connecting to and allow 443 in that rule only to this FQDN and disable web proxy on that rule.
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 3 years ago

your idea should work.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ezio Tirimacco over 3 years ago in reply to LHerzog

Thank you for your answer,

unfortunately I do not know to which address the printer sends the reports, but I only know that it communicates via ssl.
Can you explain the steps to be taken on the fw to perform the action?
I'm still learning the features
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 3 years ago in reply to Ezio Tirimacco

I think you'll be able to create a MAC address object and then a firewall rule.

In that rule define web filtering. Create a Web Policy for the printer before or use the default policy.

Enable logging on the FW rule and see in the live logs to where it connects.
Cancel
Vote Up 0 Vote Down

Cancel