Firewall blocking gw ip both side

So what you are saying is the switch doesn't about the firewall?

my firewall is  XG210 (SFOS 16.01.1)

Ranjan,

make sure to upgrade to latest version (16.05.MR3). Also did you connect the XG WAN to Gateway using a Cross-over cable?

Did you enable ping on Administration > Device Access?

Does a LAN to WAN Firewall rule exist?

Thanks

Hi Iferrara,

Thanks for your response. 

ok i will upgrade it .

XG WAN connected to Cisco Nexus via Single mode fiber 

Ping already enable it and ICMP also.

No firewall rule, all are Any any.

please note there is no LAN-WAN - as long as same subnet its all LAN zone with bridge mode ( transparent firewall)

let me know if i configure anything wrongly or its firmware bugs?

My apologies i'm new to sophos. :)

all connection via 

firewall to cisco sw single mode fiber

frewall to dell sw multimode fiber

Hi Ranjan 

Could you check if you have enabled routing on the Bridge interface? Also could you check the traffic via console to check if the traffic is forwarded or not.  
Command : console>tcpdump 'host <gateway ip> and icmp 

Hi Aditya,

Thanks for the support.

Routing enabled already( but no need as its same network)

console part i will check tomorrow and update.

in case traffic not forwarded,

what is the next action or command?

upgraded firmware 16.5.3 but still cant  ping gw

upgraded firmware 16.5.3 but still cant  ping gw

Hi Ranjan 

First, we need to determine the reason why the traffic was not forwarded to your gateway. You may try to add a static route and check the ARP entry on the XG device. To check the arp entry on the XG you may go to Network> Neighbors > Show IPv4 Neighbor cache.

Hi Aditya,

Thanks for the support. 

This new firmware firewall rules has a new feature is called , MATCH KNOWN USER.

it was checked by default.

after removed the checked. its working fine. 

it was a good lesson learn from this issue. 

Thanks all for the support.

Best Regards

Ranjan.