Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 31 replies
  • Answers 2 answers
  • Subscribers 34 subscribers
  • Views 145028 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Port Forwarding Xbox Live Services to Xbox One Results 'Strict NAT'.

ChrisLynch

Happy New Year everyone.

I have 2 Business Rules setup on my brand new Sophos XG firewall (Firmware 15.01.0):

 

However, when I do various tests on my Xbox One, it always shows as "NAT Type: Strict".

The UDP Ports are 88, 500, 3074, 3544 and 4500.  TCP Ports are 88 and 3074.

I really wish Sophos would add uPNP support for situations like this.  Yes, I'm fully aware of the security implications of uPNP, but for home users (especially with multiple Xbox's like me), setting up Port Forwarding isn't a fun thing to do.

Am I missing something here?



This thread was automatically locked due to age.
Parents
  • 0
    Just create a bypass rule for your Xbox and use NAT. I did on mine and not sure why this won't work in your situation. Even if you get port forwarding working the way you like, eventually you are going to run into an issue with Netflix and other streaming services not connecting if you are scanning for malware on your default network policy.
Reply
  • 0
    Just create a bypass rule for your Xbox and use NAT. I did on mine and not sure why this won't work in your situation. Even if you get port forwarding working the way you like, eventually you are going to run into an issue with Netflix and other streaming services not connecting if you are scanning for malware on your default network policy.
Children
  • 0 in reply to Timothy Stewart
    Ah, I see. 2 Xbox One's on the same network. Yeah, I think your only hope is UPnP. I don't think you solve this with port forwarding, at least according to tons of posts on this issue all over the web.
  • 0 in reply to Timothy Stewart
    You don't need UPnP for more then one gaming console to work. Please read my post above.
  • 0 in reply to Timothy Stewart
    Not sure where the OP stated anything about Netflix but you are correct, All the streaming devices that are not Windows computers or laptops to to be excluded from all the HTTP and HTTPS scanning as well as the 'web filter' set to none and everything works.
  • 0 in reply to Big Ray
    Did you test chat, party, and separate xbox live subscriptions? The problem is that 2 consoles need the same ports to be forwarded. If you aren't using these services NAT works great. If you are, it seems like UPnP is the solve. See this: www.isolation.se/.../ and about a million other posts on the interwebs www.google.com/
  • 0 in reply to Timothy Stewart
    I am not sure if chat, party works or not all I know is my 3 kids have not complained about something not working. Even if something was not working I would not allow any gaming console to dictate how lax my network security has to be, That said I would simply put the consoles on there own separate network so my important network stays secure.
  • 0 in reply to Timothy Stewart
    Correct. uPNP is REQUIRED for multiple Consoles (regardless if Xbox or PlayStation) to support multiplayer gaming and game chat.
  • 0 in reply to ChrisLynch
    I am sorry but I don't understand what your saying here. I have 3 XBox here behind XG and I don't have any port forwarding rules created and they work fine even 'call of duty' The only thing I did was create a policy for gaming and disable http & https scanning and turn off the 'web filter' and everything seems to be working fine.
  • 0 in reply to Big Ray
    Go to your Xbox One, All Settings, select Network then Network Settings. What is the NAT Type on your console? If you aren't doing any Port Forwarding, it will be 'Strict', which both of my consoles report. Which means you will have connectivity problems to Multiplayer (especially if YOU are hosting a match, i.e. you are the leader of the Xbox Live Party) and even with XBL Chat with a party. This is a fact on how connectivity works, especially with multiple consoles on the same network, sharing the same Internet Connection.
  • 0 in reply to ChrisLynch
    Chris, Your request is absolute opposite to XG goals. I don't think they will ever add UPNP to XG.

    You can do something different. Buy a router which you will be able to reflash to OpenWRT or is advanced enough to support static routing. Connect the router to the ISP and put XBoxes on that network. Then connect XG to the network but don't use NAT, just static routing. You will end up with two network segments. One for gaming and the second secure where you can put your more valuable resources. This will be a little bit more expensive but I think it is reasonable trade-off.
  • 0 in reply to Slawski
    I agree with everything you say. There is no way Sophos would ever add UPnP and for good reason. Just hang one router off a DMZ of the other router and call it a day. This is what I do with FiOs and it works great however I don't do any VPN and I have heard 'double NAT' can cause problems with 'double NAT' but not for all.