Sophos XG WAN Failover

[@Sky1]

It was my firewall rule that had me! I tested it failing back and forth while watching your video, didn't miss a beat thank you so much for doing this video!!!

[@MikeFaucher]

Awesome, glad it was helpful. Thank you for the feedback. I appreciate it.

[@robinvangunst9895]

Thanks for the tutorials Mike. Just testing Sophos Home XG on a PC and looking to purchase an appliance to run it on and replace my good but lacking ASUS router. Your videos have been invaluable.

[@MikeFaucher]

Glad to hear and thanks for the feedback.

[@renjiithknair8869]

Sir i need advice on xg firewall In my office i configured sophos xg 125. All working vpn,webfilter,ips and dos etc. I have a problem any one can use internet access when they connect their laptop to my lan If they use cable in any lan port inside our office they can access internet . So i need to block those access and only need intetnet access for my office pcs only . I dont want to give any access to external device. Now anyone can connect to the lan easly. Pls help me to solve this

[@MikeFaucher]

Great question. One way is to use authentication by user. I am assuming you are not using active directory or any type of authentication service so you would have to create users then force the firewall rules to match users. First, you would have a rule that blocks ALL traffic as the default, then modify your current rules to "Match Known USers". This will only allow persons with a user name and password to access. There are many other ways and everything requires a bit of effort. An alternative way is to assign a static IP address to each device so that you can allow only that range of address and block everything else this way you do not have to mess with users. There is also the option of using the Sophos authentication suite but I have never tried that,

[@renjiithknair8869]

@@MikeFaucher let me try sir. Once i fiinsh i will give a reply. Thank you for all awsome videos

[@MikeFaucher]

@@renjiithknair8869 Look forward to it. Good luck.

[@shunter2829]

thank you, sir

[@MikeFaucher]

Thanks. Glad you liked it.

[@MigoBueno]

Good video, Mike. I'm trying to duplicate this scenario (using Netgear LTE modem) but on the XG V18 without success--using SD-WAN routing as outlined here ( community.sophos.com/products/xg-firewall/f/recommended-reads/118888/sophos-xg-firewall-v18-how-to-choose-the-gateway-for-a-firewall-rule ). Any thoughts?

[@MikeFaucher]

Have not had a chance to try it and it is on my list of things to review. I knew it was a bit different but now you peaked my curiosity so I will investage. Thanks for the question.

[@MikeFaucher]

Have you tried this: docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/RoutingConfigureGatewayBalancing.html?hl=wan%2Cfailover

[@Foxtrot1967]

Why not just turn on "Cellular WAN"?

[@MikeFaucher]

Good option.