Can't add an IP host (list) in IP host group

Hi EragonD F  Generally if it is not coming in the selected host then it could be expected because of not supported settings. But before we conclude I wanted to confirm and for that can you please let us know how you are trying to link this? In which settings you are trying to link in the firewall? So I can try and validate in the local LAB firewall to check and confirm the same.

Hi EragonD F  Generally if it is not coming in the selected host then it could be expected because of not supported settings. But before we conclude I wanted to confirm and for that can you please let us know how you are trying to link this? In which settings you are trying to link in the firewall? So I can try and validate in the local LAB firewall to check and confirm the same.

Hi Vishal_R

thanks for the reply.

I will describe what I did: under "hosts and services" in the tab "IP host" I created an IP host with following option --> IP Version: IPv4 and Type: IP list. Then I added my IP adresses  in the list and saved.

In the tab "IP host group" I created one group, gave a name, set to IPv4 and tried to add the IP host I previously created and mentioned but it just doesn't show up in the list to select. I can't find the IP host by searching its name either.

All other IP hosts with different types are ok and can be used, such as: IP subnet, IP range and IP address. Except IP list.

Unfortunately I couldn't find any information about it in the Sophos Firewall Documentation.

Hey EragonD F,

Can you show an example with a screenshot for the IP list you created ?

hi Vivek Jagad

here is a clear example:

I created the IP host with the type list, added the IP adresses I wanted and as you can see the "add new item" buttom under the block IP host group is grayed out.
Even if I do the other way around and go to the tab "IP host group" create a new group or select an existing one, this new IP host with the IP list won't be available for selection.

That's basically it.

Hey EragonD F,

You can add only the following: single IPv4 addresses, Networks & Range - But no IP lists under the IP host group. 

Hi Vivek Jagad

yes, I noticed that. I wanted to confirm and I also would like to understand WHY I can't add IP list into it...? Is there any documentation with an explanation?

Thanks!

This has been since the inception. I'll definitely reach out internal doc team to update the documentation to avoid any future confusion. And I'll also check "WHY" it is not a feasible option included. 

Updated: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/HostsAndServices/IPHost/HostsIPHostAddt/index.html

Thanks for your time and support. At least now I can move on and I know this is not possible.

You can close my thread if you want.