Unable to access Internet

Stephen,

welcome to Sophos Community. Make sure you have the same subnet as XG and a Policy rule exists on XG that allows you to surf on internet. Inside the XG web interface, click on the shield (3rd icon on the left) and make sure an allowed rule exists.

If it does not work, share your config.

Luk

The subnet is correct, but I do not have a Policy rule. Could you assist on how to set this up?

The subnet is correct, but I do not have a Policy rule. Could you assist on how to set this up?

Stephen,

on the shield icon, choose "Add Firewall Rule" and choose User/Network rule.

• Give to rule a name
• Disable Identity
• As source zone choose "LAN"
• As Services, add Http, https (dns if you use external DNS server or internal DNS need to access external DNS)
• As destination zone choose "WAN"
• Enable log traffic
• Save

This is a simple rule. On youtube you find more video on Sophos XG: https://www.youtube.com/user/SophosProducts

Luk

Thank you, The rule was the missing link.

Did this fix work if i may ask coz i have the same issue

Yes

This did not fix my issue. My XG has internet connection but i tried connecting my laptop directly to LAN as well as through a switch and a WiFi AP and all of my devices are picking up 192x address from the DHCP i have enabled within the XG but still no internet. This has been very frustrating experience thus far.

Gv,

Make sure in the firewall rule match know users is not checked!

Regards

Luk,

Thank you so much for your help. I really appreciate that you were able to take some time out of your busy life to remote into my machine and take a look at my configuration. I feel much better knowing that I had an expert take a look at my configurations and they look ok. 

Just to summarize, here is what I ended up doing last night to get my internet enabled on my devices outside of SOphos:

- Reset Sophos XG to factory settings

- Enabled DHCP

- Added LAN to WAN rule that allows all apps/services 

- Created a policy route under Routing/Policy Routing pointing to my LAN interface

And that seems to have done the trick. I hope it helps if someone else is running into the same issue.

Thank you again sir!

aj

hello, I have a similar case, I have configured my xg230 as follows port1: lan static 192.168.1.254 port2: wan dhcp port3: wan static in the same way I do not have internet access from the lan, I have disabled the dhcp, and occupies a fixed ip on my computer, same that I have registered in host and added a firewall rule with all the services of lan to wan and I can not get internet help...!!!