Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 2 answers
  • Subscribers 26 subscribers
  • Views 16620 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG210 - Access to FTP Server from Outside Works, Then Doesn't

Patrick Coy

Moved over to the XG this weekend from a SonicWALL NSA4500. I'm in the office and connecting to my laptop via Teamviewer. I had a connection around 11AM this morning and announced to everyone that the FTP was back up. By 11:30 I had to announce that it was down again. Then around 1PM I was able to connect from my laptop again so I announced to everyone it was back up... Then it went down again.

As of right now I can connect from my laptop to the FileZilla Server but not the WS_FTP. Here's a screenshot of the Rules that I've created. Anything noticeably wrong that I'm doing?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to sachingurung

    Hi Sachin, thanks for the reply!

    If you can see the screenshot I posted the green icons are DNAT Policies that I set up. The FTPs are hosted internally, the 192.168.31.24 and .25 addresses. The x.x.x.122 and x.x.x.118 are the WAN IPs.

    This is a brand new unit and nothing besides the FTP Rules and a VLAN Interface have been set up.

    Ugh... It is now working again. I should be happy but instead I'm irritated. I will review your troubleshooting guide!

  • +1 in reply to Patrick Coy

    I see many FTP rules configured, let's start with a cleanup. All the FW-rules that do not have any traffic displays 0B value on the bottom left, delete them!

    Next, configure a new DNAT policy by referring to Sophos Firewall: How to DNAT to an internal server. Show me the picture of configuration if the rule doesn't work. 

    Cheers

  • 0 in reply to sachingurung

    Thanks Sachin,

    It's nice to get all of that cleaned up! I worked on the Rules with a Sophos tech and we were able to determine the ultimate issue... The WAN IPs were still holding onto the MAC address from the old SonicWALL in the ISP's ARP Table. Once those propagated with the Sophos MAC address everything worked!

    Patrick