Policy Tester Firewall Rules

Hi admin_idl

Please check the drop-packet-capture 'host <destination IP> as well as tcpdump 'host <destination IP> to check the traffic flow from Sophos XG CLI

Thanks and Regards

Hi admin_idl

Please check the drop-packet-capture 'host <destination IP> as well as tcpdump 'host <destination IP> to check the traffic flow from Sophos XG CLI

Thanks and Regards

thank you for the answer. Currently the firewall is only connected to the LAN interface and I just want to check the firewall rules with the Policy Tester to make preparations.

Although the rules are configured, I still get the message that no associated firewall rule can be found when pinging the network.

Hi admin_idl,

If you want to connect to a remote branch you have to configure IPSec VPN to meet the same requirement  : 

https://support.sophos.com/support/s/article/KB-000035717?language=en_US

Thanks and Regards

I cannot find he wrote about VPN.

if your firewall rule does not match it's probably a Zone mismatch issue in your rules.

you could fill your post with some screenshots of your LAN/VLAN interfaces and firewall rule.

Also please show how you used the policy tester. it's not very intuitive.