Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 26 subscribers
  • Views 8636 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hotspot and Firewall Rule

Davide Bortolini

Good morning all,

I have a question related to Hotspot definition and the firewall rule the system creates linked to a specific hotspot. I have noticed that if you change the firewall rule (eg. enabling Malaware scan, etc) and then you have to change the hotspot settings, the firewall rule is set back to its original settings.

This is really annoyng and error prone. Is there any way to "unlink" the rule and the hotspost definition?

 

Thank you

 

Davide



This thread was automatically locked due to age.
  • 0

    Davide,

    can you share a screenshot or a short video?

    Thanks

  • 0 in reply to lferrara

     Hi Luk,

    here's an example of what I did. The first two screenshot show the Hostpot config and fw rule associated. As you can note there's no Traffic shaping rule in Hotspot settings and in FW rule I have Malaware scan active.

     

    If I change the hotspot settings (eg. adding a Traffic Shaper) or even if i simply click on OK without changing anything, the FW rule is changed, which is not desiderable. I could change some settings in Hotspot (eg. branding opttions or vouchers) but it hasn't to change back my firewall policy.

     

    Davide

     

  • 0 in reply to Davide Bortolini

    Davide,

    Hotspot Filters take precedences, so it is better to configure them on Hotspot page and leave none on the Firewall rule.

    I suggest you to try this:

    As source use network defined subnet instead of an interface and set the filters here, while on the hotspot page leave all filters as none.

    Firewall rules do not work well when there is an interface used as source/destination network.

    Let us know.

    Regards