Create a rule on xg 330 for internet traffic?

Jörg,

on your rule, did you enable the source rewrite?

Anyway share a screenshot of your Policy Rule.

Thanks

Hello, yes we have enabled

Rewrite source address(Masquerading)

Jörg

Hello,

is it possible to set the xg 330 factory default?

I think we have configured something wrong.

Jörg

Several screenshots of the rule.

Jörg,

can you enable the logging on this rule? Is your XG able to go on internet? Check a ping from it.

Of course resetting to factory default is possible but I think you are missing something.

Check your logs from System > Diagnostic > Log Viewer.

I have enabled the logging for this rule.

I don't prefer to reset the firewall to factory default but I have no idea what is wrong

What do you expect in the log Viewer.

Here are screenshots from the log viewer, al other are empty

It seems that XG was able to go on internet and updates.

If you ping www.google.com from XG, does it work? Ping can be reached from System > Diagnostic > Tools

What message do you receive when you try to surf on internet behind the xg?

When I ping www.google.com from the firewall, it works. But when I ping from a client behient the firewall it doesn't work. What must I configure that this also works?

In the inside network we have several clients and one server. The clients don't reach the internet.

At the server runs sophos enterprise console which don't get updates for the entpoint protection.

Thanks for help

Jörg

Jörg,

I have never seen the yellow triangle inside the policy rule next to Malware scanning and APP/WEB. All the packages are updated? Check them inside System > Administration > Updates.

Luk,

but I think the Malware scanning has nothing to do with the reachability of the internet.

About Sytem > Administration > Updates the xg told me that everything was successfully. Where can I see, if it was realy successfully?

In the configuration process of the xg firewall, the system creates also some rules. Where can I see these rules?

We have create port 5 for the dmz. Is this the problem? The ping from a client reached the firewall at the lan port (port 1) and try to find the internet at the dmz port (port 5).

Have we configure another rule for this way? I hope you know what I mean.

Jörg