This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need Help with QoS and a few General Things

Hello there,

please do not blame me for my bad english, i am not a native english speaker but i will try my best.

 

Through a Blog i found the Sophos XG for Home and i bought an ITX System with dual NICs.

Now i have a few problems.

 

1. IPS

I saw there a few IPS Policys , A general one and a LAN to WAN rule and a few others, which i can explain my self.

But i dont know which one to choose for my Home Network. Because there is a WAN to LAN rule and a LAN to WAN. 

Could someone give me an advice which is the correct one for me? And is there a Big diffrence between thos both?

 

2. QoS

I have an 50 mbit/s VDSL connection from my Provider. It has 50 Mbit/s in Download and 10 Mbit/s in Upload.

In my Network i have 3 Streaming Devices for Live TV. This devices i can only identify via MAC or Static IP which i reserved in the DHCP options.

So my question is, how to create a Traffic Shaping Rule with a reservation of 7 mbit/s for each of this clients.

The Problem here is, when i start a download on my Windows Machine, it take the whole bandwidth for the download any the TVs beginn to stutter.

 

3. VPN

Is it possible to create a VPN Login for my Clients to connect to my home network when i am not at home? The tutorials i found made for the old XG and there a whole new menu.

Could somene share a link with me for the XG 17?

 

All the other things like Custom Webfilter and so on are awesome. I like the XG very much for its innovative User Interface and the polished modern style.

 

A big thanks from me to the Community and Sophos . For give us an enterprise Firewall for Free! 



This thread was automatically locked due to age.
  • Hi and welcome,

    the IPS bit is easy, LAN to WAN. When you gain a little confidence with XG and its settings you can fine tune and build your own IPS rules.

    Most of the IPS rules are default templates.

    I have QOS on my VoIP phones, but never really tried it out to see if it actually works. A word of warning a lot of the values shown in XG are in KB (kilobytes) not kb (kilobits).

    Ian

  • Thank you for you fast answer, i think i need more time to get in the IPS. So the most important thing i need to fix is the QoS. 

     

    I had calculated it to KB/s but it wont work. The rule i set was active and i saw the sum of the traffice went up all time. now i have a few GB went trought this firewall rule. 

    But when i actually star a download on my windows client, it takes the whole bandwidth and traffic shaping is not working. Its a Rule Based Traffic Shaping policy i made. 

     

    When i get home later i will take a screenshoot. 

  • Take a look at shred's website https://shred086.wordpress.com it should help you get closer to an operational start for your policies. He has provided what he has gathered from the many post in these forums into something that assists for getting XG setup for a home network. Also he is active in both the forums and from his site. Hope this helps -Ron
  • Hi Amadyl ,

    You may need to consider the value entered as KBps i.e. Kilo Bytes per sec. For instance you want to keep a restriction of 1Mbps you may use the formula 1024/8=128KBPS.

    You may have entred 1024KBps instead. 

  • Awesome! Thanks, this solved other questions i had.