Synology NAS loses connection after IPS is enabled in LAN to WAN Rule ?

Hello Nabil R1,

Thank you for reaching out to the community, you'll be able to see the traffic getting dropped under the log viewer > drop down menu > IPS. 

Thanks,

It's empty though.

If I remove the IPS, I get the connectivity back. So it is definitely due to that. 

Just for the testing purpose, what if you bypass the firewall rule under the IPS exception: 
Please follow the steps mentioned in the KBA: https://support.sophos.com/support/s/article/KB-000038900?language=en_US
 

Same thing, it didn't seem to work.

Can you share the results of show ips-settings. 

console> show ips-settings 

-------------IPS Settings-------------

ac_atp_exception_fwrules 11

stream on

lowmem off

maxsesbytes 0

maxpkts 8

enable_appsignatures on

http_response_scan_limit  65535

search_method ac-bnfa

sip_preproc enabled

sip_ignore_call_channel enabled

inspect untrusted-content

-------------IPS Instances------------

IPS is running on all cores

I'm actually lost. Now after deactivating IPS globally, I still don't have connection for some of my app on my NAS.

Can you also increase the maxpkts with the help of the following command: set ips maxpkts 100
And then check the results again. 
=============================
Monitor dropped packets using CLI : https://support.sophos.com/support/s/article/KB-000036858?language=en_US

Create and download a packet capture : support.sophos.com/.../KB-000037007

It says 0 dropped packet

Can you  Monitor traffic using Packet Capture Utility : https://support.sophos.com/support/s/article/KB-000035761?language=en_US
And also check with the Create and download a packet capture : https://support.sophos.com/support/s/article/KB-000037007?language=en_US

I'm starting to think the problem has nothing to do with Sophos but rather with my NAS itself.

I'll try to investigate something down this road first before bothering you any further. 

I really appreciate the time you took in following my queries. I'll get back to you quickly

I'm starting to think the problem has nothing to do with Sophos but rather with my NAS itself.

I'll try to investigate something down this road first before bothering you any further. 

I really appreciate the time you took in following my queries. I'll get back to you quickly

I've now found out that it is not the NAS that is the issue. Any docker pull xx I do from any host fails.

Downloading an ISO, seems to work.

Strangely, on one of my linux box, when I forced the MTU to a different value, it would then successfully download.

But I'm not sure which MTU I should be using, and how to set it across my network ?