This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT - FIREWALL - BUSINESS APPLICATION RULE - ISSUE

Hi, I'm new in XG but I've installed Hundreds of Astaro (since V6) and Sophos UTM.

In this days I've started to work with XG and this is my question, is this normal?

as you can see with the same source IP, destination IP and port, sometimes the traffic pass and sometimes not, this is my rule, what is wrong:

If i start an https session from the browser, it works but when I start some other type of request on that port, the traffic didn't pass.

This thread was automatically locked due to age.

0 lferrara over 8 years ago

Andrea,

https port is already used for user portal under Administration > Admin Settings. You have to change the user portal to another port (at the moment).

Vote the feature request:

http://ideas.sophos.com/forums/330219-sophos-xg-firewall/suggestions/13872216-share-ip-between-user-portal-and-waf

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Andrea cHESSA over 8 years ago in reply to lferrara

This is not the same thing, I have a dedicated IP and I want to have a DNAT, not a WAF rule.

When you nat the 443 port, automatically the user Portal did not work (and I think that this is correct), in this case with XG, the problem is that for an unknow reason The XG sometime block the traffic, as you can see in the picture I posted.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Andrea cHESSA

By default, Andrea,

the User Portal listens to all IPs in the same zone (WAN zone). Try for a while to change the userportal port and see if the behaviour goes away.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel