Sophos XG330 outgoing RDP

Hello Joerg,

did you configure MASQ for this outgoing interface? I mean, when gping from private IP to public internet you have to masq the internal network behind your public IP.

Hello Philipp

Yes MASQ is enables (that was the 1st 3hours of troubleshooting why the internet access not working :-) ) the other rules are working (also SSH connection to external servers), only RDP is not working.

I have read here in the forum about the IDS rules, but they are all disabled for the firewall rule that "hold" the RDP rule, we also have disable the feature on the firewall, but no effect

Here a Screenshot of the MASQ NAT Rule:

Here a Screenshot of the Firewall-Rule:

The other services of the rules are working

Here the view of the protocol view:

and for Rule #5:

maybe it helps

Hi,

the protocol report shows the packets are not hitting yjr NAT rule. Do you have a generic NAT (MASQ) rule or soeufucu for each port ?

Ian

Hi Ian

yes, NAT MASQ is enabled (see the 1st Screenshot of my answer to Phillip  ANY Internal, ANY Service to External WAN [DTAG & DGF are our internet service provider]), the other services of the rule are working, only RDP is not working and show that kind of Log-Entries.

Hi Ian

Are - now, i have create a linked NAT MASQ Rule for that Firewall-Rule, now it allows the traffic to outside. a bit confusing because of the Last Rule of the NAT that marks "any" outgoing traffic and services with NAT MASQ

Hi,

if you have 4 data services then you should look at sd-wan routing  as well.

ian

SD-WAN Routing, yes. that is one thing for the next days.

For availability a already use 2 x XGS330 devices in active:passive mode, the internet uplink itself have 2 lines and managed by the internet service provider.

SD-WAN Routing, yes. that is one thing for the next days.

For availability a already use 2 x XGS330 devices in active:passive mode, the internet uplink itself have 2 lines and managed by the internet service provider.