POS Failures

Question

Interesting issue here... 
 We have a client that has retail stores and they use POS systems. Basically they have a POS software that talks out to another provided to process transactions. 
 What happens is that periodically they get communication failures from the POS software. I have been told by the CC processor that the error means that the POS terminal did not receive the response back from their Data-Center. 
 My questions is this: 
 Where do I need to add the IP address ranges they gave me so that their system has unrestricted access into the LAN to communicate with the POS machines? 
 Let me know if there is a better place for this post or if you need more information.

TimFoster · Accepted Answer

Just an update here. 
 
 Our issue turned out to be some content filtering software installed. 
 
 Thank you for all the help.

Aditya Patel · Answer

HI TimFoster, 
 You may create a destination-based firewall rule and position the rule on the top position and do not attach any Identity also mention the destination network address. 
 
 Thanks and Regards 
 Aditya Patel | Network and Security Enginner.

sachingurung · Answer

Hi Tim, 
 Assign a static IP to the POS device and create a clientless user for them. Refer https://community.sophos.com/kb/en-us/123039 . 
 Now configure a FW-rule on TOP of all the rules and disable all the scanning especially, define NONE in the Web filter and Application filter section. PFA screenshot of the FW rule. 
 
 In such scenario always route the connection through a single gateway, do not define Load balance in the rule. 
 Thanks