Network Protection: Firewall, NAT, QoS, & IPS Internal Network Route to VLAN ... Possible??

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 3 subscribers
Views 6643 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Internal Network Route to VLAN ... Possible??

Proudmore over 7 years ago

Hi Sophos Community,

Good Day

This is the Scenario:

**Internal Network is directly connected to Sophos
**Vlans are within HP L2 SW

Scenario :
Internal Network Route to Vlan 10 and Vlan 10 to internal Network?
Internal Network Route to Vlan 20 and Vlan 20 to internal Network?

are this two scenario is possible under UTM 9?

Thank you

This thread was automatically locked due to age.

Parents

0 BAlfson over 7 years ago

You will want to bring the VLANs to the UTM. When you define the VLANs on the interface, WebAdmin will automatically create the necessary routes, and you will then only need to make the desired firewall Allow rules.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Proudmore over 7 years ago in reply to BAlfson

Hi Sir Balfson,

Good Day

Thank you for your warm response.

Yes.. VLANS is with Sophos interface other than Internal Network

Sophos > Sophos Vlan Interface > HP SW

But then I already configure firewall Rule

Source: Internal Network
Services: Any, Ping
Destination: Vlan 10

Source: Vlan 10
Services: Any, Ping
Destination: Internal Network

*Above configuration is not working

I already use this configuration: it it doesnt work
Source: any
Services: Any, Ping
Destination: any

Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to Proudmore

Does doing #1 in Rulz give you any insight?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 7 years ago in reply to Proudmore

Hi,

Apart from Bob's suggestion, also check in Firewall > ICMP; if ping is allowed through the UTM and if everything works well, PM us a tcpdump output for ICMP.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 sachingurung over 7 years ago in reply to Proudmore

Hi,

Apart from Bob's suggestion, also check in Firewall > ICMP; if ping is allowed through the UTM and if everything works well, PM us a tcpdump output for ICMP.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data