Open SFTP on my XG Firewall from within my network

Hello lazo8592 ,

Thank you for reaching out to the community, the screenshots are missing, can you please share it ?

See links below 

https://imgur.com/a/PJsCsHK

https://imgur.com/a/k1Qw8Ee 

That client IP is located on the WAN right ?
Can you please create a Linked NAT and enabled the MASQ on it and save it !
Please update us once done lazo8592 

hI Vivek

Yes the client is located on the WAN side and I have now created a linked NAT with MASQ enabled but still it doesn't connect. The log viewer shows port 22 is being denied even though I opened the port as sftp. 

In my main rule for internet I have also added the service SFTP as well to it. 

Is there something else I have to add to get this working? 

Can you perform a packet capture to see if it is not causing any sort of a violation ?
https://support.sophos.com/support/s/article/KB-000035761?language=en_US lazo8592 

I managed to open the log viewer with the source IP I am doing the test from and firewall allows everything but cannot connect. See link below 

Firewall allows port 22

How do I do a capture within the log viewer? 

Hey lazo8592 ,
https://support.sophos.com/support/s/article/KB-000037007?language=en_US
Can you capture a tcpdump ?

Vivek, 

You lost me at device management ->advanced shell 

Isn't there an easier way to do this? It shows in the log viewer firewall is allowing port 22 traffic to the client IP.

Perhaps the client is blocking our public IP from their side? 

 lazo8592 Under the advance shell
#tcpdump -nei any host <DST IP>

We can check the communication between the client and the server...
We can also capture the packets on Port as well
#tcpdump -nei any Port 22 

Perhaps there is a possibility  your public IP might be blocked...but we can double check with the help of 3 way handshake via tcpdump !!

 lazo8592 Under the advance shell
#tcpdump -nei any host <DST IP>

We can check the communication between the client and the server...
We can also capture the packets on Port as well
#tcpdump -nei any Port 22 

Perhaps there is a possibility  your public IP might be blocked...but we can double check with the help of 3 way handshake via tcpdump !!

ok I did the packet capture, where do I get it the output as I don't see a tmp directory in my user computer profile

Just simply capture the packets on advance shell and share the packet capture here
SYNTAX- tcpdump -nei any host <DST IP>