Traffic to DMZ not working with SDWAN

Question

I have created an SDWAN routing to route a particular internal network via ISP 2. The problem is even traffic destined to DMZ zone in the same firewall is being routed via this SDWAN policy towards ISP 2 interface. 
 How can internet from an internal network go through ISP2, without affecting traffic to DMZ zone in same firewall.

Raphael Alganes · Answer

Hello there, 
 Good day. Thanks for reaching out to Sophos Community, hope you are well 
 To allow internal sources to reach internal networks directly (internal hosts accessing internal devices and servers), set the routing precedence with static routing before SD-WAN policy routing on the command-line interface. 
 console> system route_precedence set static sdwan_policyroute vpn 
 Then verify precedence 
 console> system route_precedence show 
 https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Routing/SDWANPolicyRouting/RoutingSetRoutePrecedence/index.html#introduction 
 Hope this helps. Many thanks for your time and patience and thank you for choosing Sophos 
 Cheers,

Traffic to DMZ not working with SDWAN

Top Replies