Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 941 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Setting up IP Camera VLAN

Antonio Principato1

Hello,

I'm new to Sophos and can't seem to figure out what I'm doing wrong.  I created a separate VLAN (Port 1.50) to prevent my IP cameras from accessing the internet and added the VLAN to the default "Traffic to WAN" group, rejecting any internet traffic (not shown in the picture, sorry).  I left the default Sophos Network Policy for now.  I can view the camera stream from a computer on VLAN 1.30 via a web browser but the NVR application on the same computer doesn't seem to find the camera stream.  Have you run into this issue?  I can provide more detail if I'm not clear enough.    

 



This thread was automatically locked due to age.
Parents
  • +1

    You seem to have gone about the security the hard way. If you don't have a firewall rule allowing your camera's IP address access to the internet then it does get access. You will need a firewall rule similar to ZONE LAN, network - camera IP and NVR IP, destination  LAN, network NVR IP, allow ALL and log.

    I would disable or remove the default firewall rules, they will just cause you confusion. Also delete the linked NAT rules and create a generic NAT rule for all networks.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • +1

    You seem to have gone about the security the hard way. If you don't have a firewall rule allowing your camera's IP address access to the internet then it does get access. You will need a firewall rule similar to ZONE LAN, network - camera IP and NVR IP, destination  LAN, network NVR IP, allow ALL and log.

    I would disable or remove the default firewall rules, they will just cause you confusion. Also delete the linked NAT rules and create a generic NAT rule for all networks.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Children
No Data
Unfiltered HTML