This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS Resolution Issue UTM9.3

Hello All,

I am new this forum. I have migrated from Endian FW to Sophos UTM home edition. It has only been 3 days since I have done the setup but leaning to go to back to Endian, hoping I wont have to & some guru will help me.

I have 3 LAN cards in the UTM, Internal LAN on 192.168.0.1/24 DMZ 192.168.100.1/24 & WAN connected to ISP.

I have set UTM as DHCP & DNS for my Internal LAN users, users connected via wired connection are kind of OK they get the IP & internet works but takes a little time to resolve external websites about 30 -40 seconds.

The wifi Users are the ones I am having great problems with, DCHP assigns correct IP but users cannot resolve any external websites- no internet access. so a computer/laptop will have right IP, DNS, DHCP, Gateway IP assigned

Just for info I don't use my ISP DNS in UTM, I have Google/OpenDNS forwarders set this is irrelevant.

I have a read a few other people having similar issue but with older version I am wondering is it me who has done something wrong but that doesn't make sense because wired connections are able to browse the internet fine, ok, IP assignment is slow but works or it is the UTM which has a known problem.

Please help Many thanks

This thread was automatically locked due to age.

0 BarryG over 10 years ago

Hi,

Please see https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32566
and let us know if your config differs.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 10 years ago

What version are you running exactly?

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 10 years ago

Hello Chaps

Thanks for your replies. The precise firmware version of UTM is 9.308-16.

Bary I kind of use this, this setup @ home dont want to setup AD environment

"ASG forwarding to ISP-nameservers (mine forwards to Google &OpenDNS)
- "request routing" on ASG for internal domain pointing to internal nameservers (Dont use that reason below)

- internal nameservers forwarding to ASG" (My internal client forward request to UTM)

I have made my comments in red. As I don't have any Internal DNS servers I am not using request routing or should i be ? the clients use UTM as DNS & DHCP Server.

Here are some screen dumps might help, had to upload them to Google drive https://drive.google.com/folderview?id=0B4SOdTEDZjS0ZlFCTXdXLVdma1U&usp=sharing

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 10 years ago

Try upgrading to 9.309, one of the fixes is:

34382 Client is unable to get an IP address from UTM DHCP server in seperate zone network

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 10 years ago

I noticed in your screenshot with DHCP (UTM1.png) that your DHCP is turned off (the toggle switch directly under 'Sort By:'. Is that in fact, on? Your screenshot says otherwise...

XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | GB Ethernet x5
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 10 years ago

Hello,
Ok I will try the update see if that helps, DHCP is turned off in the Screen Shot only because I have Disconnected the UTM all together causing connectivity issues. using Internet direct

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 10 years ago

Hello apijnappels

Have you got the link for 9.309 I cant seem to find it here UTM Support Downloads

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

ftp://ftp.astaro.de/UTM/v9/up2date/

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 10 years ago in reply to Scott_Klassen

ftp://ftp.astaro.de/UTM/v9/up2date/

Or to be more complete:

ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.308016-309003.tgz.gpg

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Cancel
0 HammerRodx over 10 years ago

Hello,

Many Thanks for the link...I will test & report with the update
Cancel
Vote Up 0 Vote Down

Cancel

DNS Resolution Issue UTM9.3

Submitted a Tech Support Case lately from the Support Portal?