Disable wan load balance on LOCAL zone

Question

Hi guys, 
 I'm using Sophos XG on VMware with two PPPoE connection in load balancing mode (round-robin), weigth 1 for both WAN. 
 I'm having some issues with FTP backup not working because of the WAN balacing. 
 Is there a way to disable the load balance for the LOCAL zone?

DaveHamer · Accepted Answer

Hi Andrea,

Presumably you only want it to send from one particular connection. As long as you have a static IP address on that connection you can use "Local NAT Policy"

https://community.sophos.com/kb/en-us/122999

set advanced-firewall sys-traffic-nat add destination <destination IP address> snatip <SNAT IP address>

This tells the Firewall to use a particular connection for locally initiated traffic destined for a certain IP address.

Hope that helps!

Dave

Chris Shipley · Answer

I think the way to do that is to configure a policy route that will push FTP traffic from a (host, network, etc) and push it through a specific Interface. Go to Configure\Routing\Policy Routing. Here's a sample policy route that might work for you:

lferrara · Answer

Andrea, 
 No firewall rules are needed if you configure the ftp backup using built-in backup feature: 
 
 Regards

lferrara · Answer

Andrea, 
 are you sending backup through WAN interface? I mean, is the FTP server located outside your network? 
 If yes, I guess you need to open a ticket with support, because firewall rules are not managing the XG itself rules (ACL does). Inside ACL you cannot control FTP behaviour. 
 So open a ticket with support or use another method to backup XG configuration. 
 Regards