Trying to narrow down the issue - New Setup

Hi Bob,

Deploy UTM in bridge mode and use Web protection in Full transparent mode(i.e., bridge mode). Please refer the following links:

https://www.sophos.com/en-us/support/knowledgebase/121532.aspx

www.sophos.com/.../119360.aspx

Thanks

Sachin,

With the current setup we have, there are only two network interfaces and when I attempt to remove them from the interface screen in order to re-add them as a bridged interface it wont allow me to remove the one connected to our internal network due to it being in use by my admin session. Is there a way around this? Its set up on a Windows 2012 Hyper-V so I have access to the physical computer its on if there is a way to do that through command line.

Thanks

Sachin,

With the current setup we have, there are only two network interfaces and when I attempt to remove them from the interface screen in order to re-add them as a bridged interface it wont allow me to remove the one connected to our internal network due to it being in use by my admin session. Is there a way around this? Its set up on a Windows 2012 Hyper-V so I have access to the physical computer its on if there is a way to do that through command line.

Thanks

Hi,

What error message is flashed? I think you need to log in through a different interface and deploy the rest of the interfaces in bridge mode. Not sure never saw such instance, please post some screenshots.

Thanks

Sachin,

The message is displayed below, and I think (please confirm if I'm correct) that the issue I'm running into now is just that my setup doesn't have enough NICs. I only (as of now, looking at purchasing an additional NIC for our server) have the two interfaces available. One connected to our core switch the other to our firewall.

Before I do purchase the additional NIC is there any way to set up the bridge interface through the console on the UTM itself instead of the web interface? In case I'm using the wrong descriptors, when I'm referring to console I mean what is below.

Thanks,

NICs are cheap, Bob.

First I looked at an existing interface:

sophos:/root # cc get_object 'REF_IntEthRedTulsa'
{
          'autoname' => 0,
          'class' => 'interface',
          'data' => {
                      'additional_addresses' => [],
                      'bandwidth' => 0,
                      'comment' => '',
                      'inbandwidth' => 0,
                      'itfhw' => 'REF_ItfRedReds1Tulsa',
                      'link' => 1,
                      'mtu' => 1500,
                      'name' => 'RED Tulsa',
                      'outbandwidth' => 0,
                      'primary_address' => 'REF_ItfPri1721638124',
                      'proxyarp' => 0,
                      'proxyndp' => 0,
                      'status' => 1
                    },
          'hidden' => 0,
          'lock' => '',
          'nodel' => '',
          'ref' => 'REF_IntEthRedTulsa',
          'type' => 'ethernet'
        }

Then, I changed the Interface to "'Type: Ethernet Bridge" and looked again:

sophos:/root # cc get_object 'REF_IntEthRedTulsa'
{
          'autoname' => 0,
          'class' => 'interface',
          'data' => {
                      'additional_addresses' => [],
                      'ageing' => 300,
                      'arp_bcast' => 0,
                      'comment' => '',
                      'converted_from_hw' => 'REF_ItfRedReds1Tulsa',
                      'forwarded_ethertypes' => [
                                                  '88B7'
                                                ],
                      'itfhw' => 'REF_ItfBriBr0',
                      'link' => 1,
                      'mtu' => 1500,
                      'name' => 'RED Tulsa',
                      'ports' => [
                                   'REF_ItfBriReds1RemotEther',
                                   'REF_ItfBriEth2IntelCorpo'
                                 ],
                      'primary_address' => 'REF_ItfPri1721638124',
                      'proxyarp' => 0,
                      'proxyndp' => 0,
                      'status' => 1,
                      'stp_fd' => 0,
                      'stp_hello' => 0,
                      'stp_maxage' => 0,
                      'stp_prio' => 0,
                      'stp_status' => 0,
                      'use_dhcp' => 0,
                      'virtual_mac' => '00:00:00:00:00:00'
                    },
          'hidden' => 0,
          'lock' => '',
          'nodel' => '',
          'ref' => 'REF_IntEthRedTulsa',
          'type' => 'bridge'
        }

Not something I would think could be modified by hand.  WebAdmin and the config daemon handle all of the changes in a single pass.

Cheers - Bob

Thanks for the replies, its much appreciated, the same goes for the explanation on what happens when changing the interface inside the UTM.