Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 2 answers
  • Subscribers 3 subscribers
  • Views 68397 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Port forwarding on Sophos UTM9

Milena Lowe

Hi

I am new to Sophos UTM 9. I usually work on Sophos XGs but this is so different to UTMs. I am trying to configure port forwarding. I have a rule that shows Source is Any going to an Internal IP address via port 8080. But on testing it does not appear to be working. Is there anything else I need to do? Am I supposed to configure DNAT also?

Any help would be appreciated.



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    you need a DNAT Rule for this. any / port 8080/tcp / yourWANInterface ... Destination is your internal server.

    if you set automatic paket filter rule you dont have to define paket filter manually...

     

    thats all then it should work.

    greets

    zaphod
    ___________________________________________

    Home: Zotac CI321 (8GB RAM / 120GB SSD)  with latest Sophos UTM
    Work: 2 SG430 Cluster / many other models like SG105/SG115/SG135/SG135w/...

  • 0 in reply to zaphod

    I followed your instructions and still no luck!

  • 0 in reply to Milena Lowe

    Open the Live Logs mentioned in #1 in Rulz and then test your DNAT.  If you see something pertinent in the Firewall log, copy and paste the corresponding line from the full Firewall log file.  Show us a picture of the Edit of the DNAT with the object in 'Change the destination to' also open in Edit.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to Milena Lowe

    Open the Live Logs mentioned in #1 in Rulz and then test your DNAT.  If you see something pertinent in the Firewall log, copy and paste the corresponding line from the full Firewall log file.  Show us a picture of the Edit of the DNAT with the object in 'Change the destination to' also open in Edit.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to Milena Lowe

    Hi,

    is going to External (WAN) address?

    What are the other external WAN definitions with imposserver in its name?

    have you activated the dnat-rule? if you create it it is still greyed... need to activate it so the button goes green...

     

    greets

    zaphod
    ___________________________________________

    Home: Zotac CI321 (8GB RAM / 120GB SSD)  with latest Sophos UTM
    Work: 2 SG430 Cluster / many other models like SG105/SG115/SG135/SG135w/...

  • 0 in reply to Milena Lowe

    When responding to Zaphod's question, please also include a picture of the "Server impos..." object open in Edit with the 'Advanced' section showing.

    Also, see #5in Rulz.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?