Hey Scott,
isn't the web proxy higher up the chain than a snat/packetfilter rule?
So traffic would never reach the snat rule with the proxy enabled on the wifi network?
Don't you need a policy based routing rule or something similar?
Ian
This certainly seems to be the behavior. What I am not following is where traffic is directed out a default interface/IP combination.
Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
As of 03 June 2017, this is now possible! See How to change the outgoing interface for Web Filtering.
Rather than use the suggested method of enabling this capability, do the following as root:
cc set http enable_out_interface 1
Cheers - Bob