RED 15 and Sophos XG configuration problem

Hi,

As I can see Cyberoam is intermediate firewall for LAN and XG hence, are you able to reach XG from the end points connected to RED. Next what rules and routes are defined in XG to forward the traffic from RED network towards Cyberoam?

If the traffic is successfully passed through XG to Cyberoam then you need to contact Cyberoam support to verify the issue further.

Thanks

Hi, 

I'm able to reach XG from PC connected to RED. On XG where is only one static route, to route traffic from XG LAN To our network. No rules applied, because RED and LAN is on the same zone. The problem our XG gateway, because from XG console i can ping both sides. Our network and PC connected to red

Hi,

Can you post a screenshot of the static route configurations ? 

Take SSH to XG and go to Advance Shell.

Execute tcpdump -nei any host x.x.x.x (endpoint of Red IP) ; start a ping and capture the logs. Post first 50 lines of the logs.

Next, execute drppkt host x.x.x.x; monitor if any drop packets are captured here. 

Thanks

Found problem, we can close case. Thank you

Hi,

Please share what was the solution so that out Community member can refer it anytime.

Thanks

The problem was, that i needed LAN To LAN zone on sophos XG. It's simple, but i watched tutorials with older sophos UTM version there Sophos red has independent interface zone like RED. Now on Sophos XG Red has LAN Zone. That was tricky.

Also i wanted to ask how to reach WAN from red endpoint, not from cyberoam or sophos, but from internet provider connected to RED. I know that i need split mode

The problem was, that i needed LAN To LAN zone on sophos XG. It's simple, but i watched tutorials with older sophos UTM version there Sophos red has independent interface zone like RED. Now on Sophos XG Red has LAN Zone. That was tricky.

Also i wanted to ask how to reach WAN from red endpoint, not from cyberoam or sophos, but from internet provider connected to RED. I know that i need split mode

Hi,

One question per thread please.

Thanks for the update