LAN to WAN Rule - Restrict by Port and IP Address

HI Ryan ,

As per the snaps provided , It would seem you have configured the rule correct. To verify the rule please take the SSH of the Appliance and go to console via option 4.  Type the command :> tcpdump  'host <WANIP> and port <PORT> . Here WANIP would be the host address you have configured in the destination and port would be Services added to that rule . 
Test the connection from your LAN system and monitor the packet flow if it went OUT from WAN-Interface or not . Furthermore, you may also capture the packet via Packet Capture i.e. system > diagnostics > Packet Capture and check if the packet is forwarded or not. 

You may DM me the logs from packet capture and SSH .  For more information on  Tcpdumps kindly refer the KB  article https://community.sophos.com/kb/en-us/115343 

Thanks and Regards 

Aditya Patel  | Network and security Engineer.

i am having the same issue I have create a rule like the one below it does not work every thing is blocked

but if i change source network and device to ANY it works.

Source                                    Source Network and Device                      schedule

Lan                                                 Port 3                                                       All the time

                                                        Port3.10

Destination                                Destination Network                        Service

Wan                                                     Any                                                   http

                                                                                                                        https

i am having the same issue I have create a rule like the one below it does not work every thing is blocked

but if i change source network and device to ANY it works.

Source                                    Source Network and Device                      schedule

Lan                                                 Port 3                                                       All the time

                                                        Port3.10

Destination                                Destination Network                        Service

Wan                                                     Any                                                   http

                                                                                                                        https

Having the port as Source, it seems that the traffic is not considered. If you remove the Port from Source Network and Add the Devices (IP, IP range) the rule works with no issue.

Why do you need to use Port inside Source Network?

Hey Luk

After further trial and error and discussion with the Sophos Support Engineer, the incorrect source port is the reason why the rule getting skipped. When I inserted a * into the source port and looked at the traffic again, the rule was working as intended.

Thanks again everyone!

In fact!

I tried Port inside source network/device and the rule is never matched. I think that they have to remove the possibility to add ports inside source. For me it does not make sense to add Source Port.

Agreed!