Do I enable Lan to Wan Intrusion Prevention in default network policy

Hi Jacob,

Sophos XG is a stateful inspection firewall. Hence, you have to configure IPS on the LAN_WAN rule and it is recommended.

Thanks

The Lan_Wan rule is already configured....I just need to add it to the policy correct?

Also, should have I have another rule to black all from Wan_Lan and also have Wan_Lan IPS enabled? 

Hi, 

Yes add IPS policy to the LAN_WAN rule. You do not require a separate WAN_LAN rule, LAN_WAN rule will inspect the incoming response packets and take action.

Thanks

Sorry to bring up an old thread, but I'm a little confused by this and couldn't find it by search. In IPS policies there is actually a policy for WAN-LAN but it's greyed out I'm assuming because it's not editable. delete'able. Where does one see that this policy is being applied to WAN-LAN traffic? Assuming it's not, and that the LAN-WAN rule which is on by default is the preloaded method of blocking WAN-LAN intrusions? Thanks

Hi,

those policies are basically templates for you to use to build your own.

The WAN to LAN policy is editable, little symbol on the far righthand side.

You use the WAN to LAN policy if you have your own server or external originating traffic being allowed into your network.

Ian