Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 31 replies
  • Answers 2 answers
  • Subscribers 34 subscribers
  • Views 145059 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Port Forwarding Xbox Live Services to Xbox One Results 'Strict NAT'.

ChrisLynch

Happy New Year everyone.

I have 2 Business Rules setup on my brand new Sophos XG firewall (Firmware 15.01.0):

 

However, when I do various tests on my Xbox One, it always shows as "NAT Type: Strict".

The UDP Ports are 88, 500, 3074, 3544 and 4500.  TCP Ports are 88 and 3074.

I really wish Sophos would add uPNP support for situations like this.  Yes, I'm fully aware of the security implications of uPNP, but for home users (especially with multiple Xbox's like me), setting up Port Forwarding isn't a fun thing to do.

Am I missing something here?



This thread was automatically locked due to age.
Parents
  • 0
    Just create a bypass rule for your Xbox and use NAT. I did on mine and not sure why this won't work in your situation. Even if you get port forwarding working the way you like, eventually you are going to run into an issue with Netflix and other streaming services not connecting if you are scanning for malware on your default network policy.
  • 0 in reply to Timothy Stewart

    Could you provide more detailed instructions on how to create a bypass rule for xbox?  I just started with Sophos and cannot figure out how to do this from documentation.  I use a second LAN (DMZ) to isolate my wireless mobile devices and gaming consoles from my primary LAN on Sophos.  I use my old Asus RT-N16 for on DMZ LAN for wireless connection to internet.

Reply
  • 0 in reply to Timothy Stewart

    Could you provide more detailed instructions on how to create a bypass rule for xbox?  I just started with Sophos and cannot figure out how to do this from documentation.  I use a second LAN (DMZ) to isolate my wireless mobile devices and gaming consoles from my primary LAN on Sophos.  I use my old Asus RT-N16 for on DMZ LAN for wireless connection to internet.

Children
No Data