This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Client Isolation not working on XG Home Firewall with AP55

I have install a Sophos XG Home firewall with an AP55. I create a wireless guest network with following settings:

Security Mode: WPA2 Personal
Client Traffic: Separate Zone
Zone: WiFi
IP address: 192.168.235.254
Netmask: 255.255.255.0
Encryption: AES
Frequency Band: 2.4 and 5 GHz
Client Isolation: Enabled
Hide SSID: Disabled
Fast Transition: Disabled

Client Isolation is not working. Each client can reach other clients in the same guest network. Is there anybody the knows how to configure client isolation that wireless clients couldn't reach other clients? Or is this a bug in the XG firewall?

Thank you!



This thread was automatically locked due to age.
Parents
  • Hi RPR84,

    Restart the SSiD, any help with that?

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Disable and enable the SSiD do not solve the problem...

  • Hi,

    I need to test that meanwhile, I have a question; are the clients connected to the AP in the same zone and similar band?

    Configure them on a similar Band, if they are already configured on a similar zone then, configure the band on 2.4 GHz.

    Doest that help.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Hi RPR84,

    Client Isolation works on my end for the clients connected to a Guest SSiD on a separate zone. Is the AP directly connected to the XG or to an intermediate switch?

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Clients where connected to the same AccessPoint. Both devices connect to the 5GHz radio.

    I will test further and let know the results.

  • I've install the firmware 16.05.1 MR-1 and problems with client isolation are not fixed.

    I've tested further with the following results:

    • In first place the SSID was configured with 2,4 and 5GHz signal. Client isolation was not working (clients where connected to the same AP and using 5GHz signal);
    • When I configure the SSID only with 2,4GHz, client isolation works fine!
    • When I configure the SSID only with 5GHz, client isolation works fine!
    • When I configure the SSID again with 2,4 and 5GHz, client isolation doesn't work.

    I configure the Guest SSID only with 2,4GHz and enable client isolation. For now this is an acceptable workaround. But I think it is desirable that client isolation works also when 2,4 and 5GHz signals are configured.

Reply
  • I've install the firmware 16.05.1 MR-1 and problems with client isolation are not fixed.

    I've tested further with the following results:

    • In first place the SSID was configured with 2,4 and 5GHz signal. Client isolation was not working (clients where connected to the same AP and using 5GHz signal);
    • When I configure the SSID only with 2,4GHz, client isolation works fine!
    • When I configure the SSID only with 5GHz, client isolation works fine!
    • When I configure the SSID again with 2,4 and 5GHz, client isolation doesn't work.

    I configure the Guest SSID only with 2,4GHz and enable client isolation. For now this is an acceptable workaround. But I think it is desirable that client isolation works also when 2,4 and 5GHz signals are configured.

Children