How to create port forwarding on Sophos XG 16?

Tomas,

you should use DNAT template. Follow the following KB:

https://community.sophos.com/kb/en-us/122976

Thanks

Hi Luk,

I have tried your guide but still doesn't work. Plus this article on your link doesn't match with Sophos XG 16 options.

Thanks,

Tomas

Thomas the kb refers to v15.

Post the screenshot of dnat you have done and I will try to help you.

Thanks

Hi Luk,

Please find attached photos for DNAT port forwarding rule. Still doesn't work, can't get access Synology on a domain name with port 5443 from internet and local. Ports are working on home network accessing Synology by IP address but not by domain name. Domain name DNS are are updated to DYN DNS from Synology itself.

Thanks, 

Tomas,

As destination host you should put wan ip address where the service is listening to.

From the first screenshot you can see that both wan and LAN ip are the same.

Luk,

I have changed source zone to WAN but still no luck.

Should it be MASQ my external internet IP address on 2nd picture?

Tomas,

192.168.10.30 cannot be used in both wan and LAN. Make sure to use the right ip (188.x.x.x).

Under destination host (the first one) put the wan interface ip and it will work.

HI Thomas , 

Any update on the issue you are facing  .  As per the suggestion by Luk, you should able to choose in Source WAN IP as your interface IP . .  

Thanks and Regards

Aditya Patel  

Hello,

Yes, I have managed to fix my problem.

What I did is changed Destination Host/Network under Destination & Service from my Synology to #Port2 WAN and started to work.

See attached two photos how I have managed to setup port forwarding on new Sophos XG 16.

If you want to access your Synology on a FQDN through local network LAN must be selected in Source Zone as well.

Regards,

Tomas 

HI Toman , 

Thank you for an Update . 

Thanks 

Aditya Patel