Sophos UTM 9.3 Not routing between interfaces

Hi Krishna,

Welcome to Sophos Community.

Have you configured a LAN-ANY-WAN Firewall Rule in UTM? Please check if the ping through gateway options are configured correctly. PFA screenshot:

If everything is proper, please provide me a tracert output.

Thanks

Sachin Gurung

Hi,

LAN to Wan is configured.

Also Ping through gateway options are also configures.

Tracert:

Still can not able to access Internet through Firewall.

My Lan is: 172.17.0.254 (Gateway not configured)

WAN: 192.168.0.13 (gateway 192.168.0.1)

thank you,

Krishna

Hi Krishna,

The tracert is successful !! 

Please check the DNS Server IP on the local system and within UTM, see that you are not using any proxy settings in the web browser. 

I also suggest you to restart restart the httpproxy services.

1. ssh to UTM and login with loginuser
2. su - root
3.  /var/mdw/scripts/httpproxy restart

Hope that helps.

Thanks

Sachin Gurung

I don't have any proxy settings.

About the DNS, Please see the screen shot. Not sure if I got it right.

Hi Krishna,

The allowed networks should be LAN (Networks) or ANY.  Please change it to ANY if you have multiple subnets configured in UTM.

Thanks

Sachin Gurung

Changed it back to ANY. Still no result.

Can ping the ADSL router IP & 8.8.8.8 But can not able to access internet.

Thank you,

Krishna

In WebAdmin go to Support -> Tools -> DNS Lookup and test if UTM itself is able to resolve any FQDN, like www.google.com:

If not, check the settings in Network Services -> DNS -> Forwarders.

Yes, It is resolving the google IP address.

But not letting me to browse the internet.

This problem can be caused by having both interfaces connected to the same Ethernet segment.  Make sure you haven't accidentally done that.

Also, you don't want to leave "Any" in DNS - just put in things like "Internal (Network)," "DMZ (Network)," etc.

Cheers - Bob

Changed it to Internal (Network).

Both interfaces are not connected to same switch. LAN is connected to a small cisco (dumb terminal) switch and WAN is connected to ADSL router.

The only link between ADSL and switch is this UTM and Wifi in this laptop that I turnon to send this reply's and then turnoff.

thank you,

Krishna

Changed it to Internal (Network).

Both interfaces are not connected to same switch. LAN is connected to a small cisco (dumb terminal) switch and WAN is connected to ADSL router.

The only link between ADSL and switch is this UTM and Wifi in this laptop that I turnon to send this reply's and then turnoff.

thank you,

Krishna

Hi Krishna,

In the Firewall, please change the destination to ANY in rule 1.

Now,

1. What is the DNS IP configured on the end system? Please configure the primary DNS as the UTM's local interface IP.

2. Who are the DNS forwarders? Set them to 8.8.8.8 and 4.2.2.2. You can find the option under Network Services>DNS>Forwarders.

After making the changes, please check on different web browsers.

Thanks

Sachin Gurung

It is working now.

I didn't change the rule to ANY but manually entered the DNS as you said and it started working.

Thank You very much for your help.

Thank you,

Krishna