Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 29 subscribers
  • Views 2144 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How the firewalls rules works ?

Anton Szuk

I'm evaluating Sophos XG Home and I can't understand how the packets are going through the rules Disappointed

In fresh install (18.5.2) I added few custom rules:

- first with source : LAN / networks - Any /  Schedule - Al the time,  and destination : WAN / networks - *.DOMAIN_NAME  / services - Any, everything else (web filtering, app control ) disabled

- second with source LAN / Any / All the time , and destination WAN / Any / Any with settings "Match known users" and "Use web auth for unknown users"

For my understanding all the traffic going to www.DOMAIN_NAME should be allowed by the first rule and any other should be catched by second rule and allowed after successful authentication by the user - I'm wrong ? Because it is not working like that ....

Looking at log I see that traffic to www.DOMAIN_NAME is catched by second rule and even I'm not looged in and some packets are denied and few seconds later allowed ..  :( 

I'm making mistake in configuration or don't understand how it works ?

Greetings



This thread was automatically locked due to age.
Parents
  • 0

    Hi Anton,

    what is the order of the rules, they are processed from top down? Using the match known users requires you to create users. When trying out rules it is best to leave the user security checking alone until you are happy with the process.

    Are you using linked NAT rules, that will cause some confusion for a beginner as well?

    Ian

Reply
  • 0

    Hi Anton,

    what is the order of the rules, they are processed from top down? Using the match known users requires you to create users. When trying out rules it is best to leave the user security checking alone until you are happy with the process.

    Are you using linked NAT rules, that will cause some confusion for a beginner as well?

    Ian

Children