Running Sophos XG in OpenStack

Hi,

have you created a firewall run to allow traffic from LAN to WAN and have you created a NAT rule?

Ian

Yes, rules were created. We could even see the traffic leaving the firewall in logs.

Does the log show if the traffic is hitting a NAT rule. If the traffic is not being seen returning it more than likely means you have a routing issue on the WAN interface connection.

Ian

Hey Tobias Hansen1,

Thank you for reaching out to the community, I am successfully able to run v18, v19.0.1 MR-1 and v19.5 EAP in Open Stack environment !!
It would be great if you can help me understand how have you deployed the SFOS ? Have you created a qcow2 or vmdk disk ? 
Is Port Security on the interfaces LAN/WAN disabled ?

First, I got it to work now. Problem was the port security and the default security group on the virtual firewall instanz. I disabled the port security on both LAN/WAN and gave the firewall instanz no default security group.

To answer your questions:
Deploy of SFOS as ISO file. Installed onto disk.
First only disabled Port Security on LAN, WAN was enabled. Traffic was not working. Now LAN/WAN are disabled and traffic is going through to the firewall and LAN. Also no Security Group was added to the firewall instance.

Awesome, thank you for the update. Cheers !!
Mostly it is because of the port security in OpenStack. Hence I asked you!