Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 9266 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No devices behind RED 15 can access internet or info on XG side of network

GeorgeMcCracken

We recently installed our first RED device for a client and have run into some trouble. I've spent considerable time on the phone with support, but we have not been able to crack it.

Site #1 - Sophos XG 105

Site #2 - Sophos RED 15

Both sites have Comcast as the internet provider.

When I connect the RED at Site #2, any device connected to it gets it's IP information as defined in the XG. The default gateway that is assigned by DHCP is the IP of the RED device that we set in the XG. However, nothing that is connected behind the RED device can access the internet or any system at Site #1. 

Any advice or input is greatly appreciated.



This thread was automatically locked due to age.
Parents
  • 0

    George, did you create the proper Firewall Rule to allow traffic?

    Can you share your RED configuration too?

    Thanks

  • 0 in reply to lferrara

    Hi George,

    As Luk has said about Firewall rules, when creating RED tunnels, you will need to create a firewall rules to allow traffic both ways from RED network to HO LAN and back again, or just create a LAN zone to LAN zone with any service firewall rule will cut it if you bind your RED networks to the LAN zone (I don't like doing that, I put them all on their own RED zone).

    For connections to WAN, you need to make sure you have a firewall that covers the RED network to WAN with appropriate MASQ rules.

    What method is your RED tunnel set up to do, Standard/Unified or Standard/Split (assuming Unified as you want connections to the internet routed via XG?)

    Emile

Reply
  • 0 in reply to lferrara

    Hi George,

    As Luk has said about Firewall rules, when creating RED tunnels, you will need to create a firewall rules to allow traffic both ways from RED network to HO LAN and back again, or just create a LAN zone to LAN zone with any service firewall rule will cut it if you bind your RED networks to the LAN zone (I don't like doing that, I put them all on their own RED zone).

    For connections to WAN, you need to make sure you have a firewall that covers the RED network to WAN with appropriate MASQ rules.

    What method is your RED tunnel set up to do, Standard/Unified or Standard/Split (assuming Unified as you want connections to the internet routed via XG?)

    Emile

Children
No Data