Network printer cannot scan file to pc

Hi,

you have made your setup overly complex with all those rules.

When you create a rule you include either the WLAN and LAN in the source rule or you use any in the source rule.

The WLAN (AP) has to communicate through the XG before the traffic is passed out or back internally to the local devices.

Hi

Thanks for the reply

As the network printing is ok, would I need a rule to allow traffic from the printer to the laptops on the network to allow scanning from the printer

Nigel,

if printer and computers are on the same network, firewall rules are not needed (firewall rules are needed only when you need to traverse from one network to another).

If your AP is bridged to LAN, no firewall rules are needed (as I described previously).

Regards

Thanks Luk

My AP is on a separate zone 10.10.20.1 Static / 10.10.20.20/100 DHCP

I think thats my problem as the brother printer is on 172.16.16.16 sub

The wifi user laptops get redirected to the printer via the Firewall rule but the printer cannot find the users laptops when initiating a "Scan to pc" request from the printer

I will change the AP to bridge mode and see what happens and let you know

HI Nigel 

As you are using AP and if the traffic is traversing through the XG then you may need rules to communicate with the network on another zone. I am assuming you are using as a Gateway mode and so the Broadcast packets that is used to discover the system in your network may not pass through XG as it would drop broadcast packets as per standard.

If you network are bridged via interfaces and if you are using Sophos AP , then you may need to disable Client Isolation on your AP settings on XG. Other AP may have client isolation on the device itself and is applicable for Multiple Network on the same AP . If you are using different AP , check if there are traversing through a L2 switch or not.

HI Nigel 

As you are using AP and if the traffic is traversing through the XG then you may need rules to communicate with the network on another zone. I am assuming you are using as a Gateway mode and so the Broadcast packets that is used to discover the system in your network may not pass through XG as it would drop broadcast packets as per standard.

If you network are bridged via interfaces and if you are using Sophos AP , then you may need to disable Client Isolation on your AP settings on XG. Other AP may have client isolation on the device itself and is applicable for Multiple Network on the same AP . If you are using different AP , check if there are traversing through a L2 switch or not.

Hi Aditya

Thanks for your reply

I changed the AP 100 from separate zone to bridge to lan
Connected the AP 100 to the L2 switch that the printers are connected to which made the AP on the same subnet as the printers i.e 172.16.16 20/100
The switch is connected to the Lan port 1 of the XG Firewall which has a static IP of 172.16.16.16

(All wifi laptop users can print to the printers)

The problem still remains with the network brother printer MFC 3762N when the scan button is pressed the message on the LED panel "check connection"displayed (the printer has a static IP of 172.16.16.18/255.255.255.0 and Default gateway 172.16.16.16)

I believe I have eliminated it down to the switch not routing the the AP wifi  traffic and / or the PoE injector

The Netgear switch is the GS108 which I believe is a L2 and not L3

Questions:

Does the Sophos AP 100 PoE injector just act as a bridge for traffic to pass through from the AP to the switch

And do I have to have a L3 switch to allow communication from the printer to the laptops

Thanks