Creating Firewall Rules for Sophos Central Guest Network

Hello Markus Straubinger ,

Thank you for reaching out to the community, Sophos Central Creating a guest network - https://docs.sophos.com/central/Customer/wireless/en-us/central/Customer/tasks/WirelessCreateGuestNetwork.html and adding a  VLAN interface XGS - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Interfaces/NetworkVLANInterfaceAdd/index.html

Hello Markus Straubinger ,

Thank you for reaching out to the community, Sophos Central Creating a guest network - https://docs.sophos.com/central/Customer/wireless/en-us/central/Customer/tasks/WirelessCreateGuestNetwork.html and adding a  VLAN interface XGS - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Interfaces/NetworkVLANInterfaceAdd/index.html

Thank you for the links, but that does not answer my question :-)

If I understood correct, you are managing an APX from the Sophos Central right ? 
And now you have created an SSID for the guest network with a certain VLAN ID, and Access Point locally connected with the XGS where the DHCP server for the Access Point is managed with the guest network VLAN on the XGS right ? Markus Straubinger 

Yes, i manage the Access Points in Central. Now I noticed that I can't create firewall rules for the guest network. Therefore my question, this only possible as you have described here? Creating a Vlan ID for the Guest and a Vlan Interface. Without this configuration the Guest Network uses the rules from the internal?

Yes, You'll need to create a VLAN interface on XGS where you have deployed your Access point locally !