Running Sophos in bridge mode has a few caveats. It provides DNS, DHCP etc. I wish to have the XG after a Ubiquiti Unifi USG so that it will be: ISP modem-USG-Sophos XG-Unifi Switch. All Replies Answers Oldest Votes Bridges enable you to configure transparent subnet gateways. Sophos Firewall requires membership for participation - click to join. Enter a name. You can create bridge interfaces with or without an IP address assigned to them. The Sophos community forums discuss this is some detail. I've been running this way for a year now an it works great. 2 Welcome If a post (on a question thread) solvesyourquestion use the 'This helped me'link. Product and Environment Sophos Firewall Configuring LAG in HA Deploy Sophos Firewall by following one of the links below: Deploy Sophos Firewall in bridge mode. Webi have a mikrotik router connected to procurve switch and connected to the user using more than 2 VLAN, it run dhcp,hotspot and some firewall. Running Sophos in bridge mode has a few caveats. You can create bridge interfaces in the following setups: You can turn on STP (Spanning Tree Protocol) to prevent bridge loops, which occur due to redundant paths. WebSophos Firewall allows you to implement a transparent subnet gateway with the help of a bridge interface configuration. if i setup as gateway might WebGateway or Bridge Mode MartinP over 4 years ago Hi I want to put an XG home firewall between my cable modem (without fixed IP) and the home office router. The other interface is defined as LAN and runs an own DHCP Server. 3, XG 230 Rev. Simply to use everything as designed. The cable modem is in bridge mode. Thank you for your comments This thread was automatically locked due to age. Ian XG115W - v19.5 GA - Home If a post solves your question please use the 'Verify Answer' button. Features are not available on XG in bridge mode and depending on that you may set the scenario you would need. When you configure Sophos Firewall as a layer 2 bridge (in bridge mode), you can use features, such as deep packet inspection, intrusion prevention system, malware scanning, and email content scanning without changing the configuration or IP address schema of your network. So I would disable DHCP on the router and set it up on the XG? I prefer to have the least possible devices possible, so you can remove even fritzbox too. If a post solves your question, use the 'Verify Answer' link. Not to sound lazy: Any idea if that is possible in the interface now? You can configure bridge mode on Sophos Firewall without using the assistant. All Replies Answers Oldest Votes The serial number is assigned to your Sophos Firewall. My question is, if the Netgear unit is at the edge of our network being the modem, and is currently configured as a DHCP server and handing out addresses in the192.168.0.x/24 range.What do I set the XG Appliance up as? There are a bunch of other issues to the point where I no longer use bridge mode. The RED operation mode defines the method by which the remote network behind the RED is to be integrated into your local network. Bridge connects two different LANs. This LAN interface works as a gateway for all clients. Number of Views133. Sophos Firewall can be deployed in mixed mode, i.e., with the help of a Bridge, both bridge and route modes can be You can create bridge interfaces with or without an IP address assigned to them. Thanks ever so much for the advice though! Bridges enable you to configure transparent subnet gateways. If you want to have Sophos Firewall behind another firewall and direct client traffic to that device then go to Sophos Firewall: How to configure a direct proxy when the XG is not the gateway device. By deploying XG firewall in bridge mode you can add security to your network without changing the existing network configuration. When you deploy Sophos Firewall in gateway mode, Sophos Firewall acts as a gateway for your network. Bridge connects two different LAN working on same protocol. You can set up a bridge interface over physical and virtual interfaces. Sophos Firewall drops traffic related to bridge interfaces without an IP address if the traffic matches a firewall rule with web proxy filtering or if it matches a NAT rule. WebA walkthrough of using Sophos XG in Bridge Mode. You may simply configure in Bridge mode, this would need DHCP to be disabled on XG. When you configure Sophos Firewall in bridge mode, it forwards packets such as Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and multicast routing. 1997 - 2023 Sophos Ltd. All rights reserved. Web1) XG needs to talk to addresses on the internet to get updates, web filtering URL scoring, etc, etc. need advice how to configure it, as a gateway or bridge because i still want to use the mikrotik, or i need to replace it by sophos xg? Click Enable TAP/Discover Mode if required and select one or more ports for passive network monitoring. Deploy in Gateway mode- https://community.sophos.com/kb/en-us/122972 2. The other interface is defined as LAN and runs an own DHCP Server. You will have WAN with DHCP enabled, so a internal LAN IP) and you will setup another Interface with different IP as LAN). Specify the gateway settings. Sophos Central: Live Discover Overview. Do I have to set the XG to bridge or gateway mode? Go to Routing > Gateways, and click Add. So, it will see the XG MAC and your router will never be able to get an address. The cable modem is in bridge mode. 1. Sophos Firewall: Deploy Sophos Connect MSI using script via GPO. This then connects to a couple of switches that handle all internal LAN Traffic, we also use Unifi AP's for wireless connectivity with the Wifi switched off on the Netgear unit. Ian XG115W - v19.5 GA - Home If a post solves your question please use the 'Verify Answer' button. Upon successful registration, you see the following screen. It can also be on physical interfaces that are bridge members. If a post (on a question thread) solves, Sophos Firewall requires membership for participation - click to join. You should start with a simple LAN to WAN Rule with MASQ enabled. Hi Guys,We have recently purchased an XG Appliance and are expecting it to be delivered any day now. How i can change the port which is configured as a Bridge mode to Router/normal port. When you deploy Sophos Firewall in bridge mode, you can add security to your network without changing the existing configuration. Which would only be the XG but would i have to point the XG at the static IP of the modem and then give the XG a different range for internal addresses? I wouldn't recommend it. Deploy in Bridge Mode- https://community.sophos.com/kb/en-us/122973 You can use this PDF for more details - https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en Additionally, you can filter Ethernet frames based on the EtherTypes.Deploy in bridge mode. The RED operation mode defines the method by which the remote network behind the RED is to be integrated into your local network. While it works in all layer. Specify the health check settings. The ISP router is the DHCP provider as well as the router & modem. My setup is going to be: ISP Router --> Sophos PC --> Switch --> Wifi and wired devices. WebChanging the XG to router mode will delete all firewall rules associated with the bridge, this will not affect other ports. In the router should be only one interface (XG). Click Enable TAP/Discover Mode if required and select one or more ports for passive network monitoring. Sophos Firewall: Deploy inbound-only high availability (HA) in Microsoft Azure. So, it will see the XG MAC and your router will never be able to get an address. Do I setup the Sophos PC in bridge or gateway mode? The other interface is defined as LAN and runs an own DHCP Server. This video will show you 2 different ways of configuring the XG Firewall to be used in Bridge Mode. You can also edit, clone, and delete custom gateways. Port A IP address (LAN zone): 172.16.16.16/255.255.255.0. Press question mark to learn the rest of the keyboard shortcuts. The Netgear unit is configured with PPPoE with a static public IP. Sophos Firewall requires membership for participation - click to join, https://community.sophos.com/kb/en-us/122972, https://community.sophos.com/kb/en-us/122973, https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/PDF/sfos_ug.pdf, https://community.sophos.com/kb/en-us/123524. If you want to have Sophos Firewall behind another firewall and direct client traffic to that device then go to Sophos Firewall: How to configure a direct proxy when the XG is not the gateway device. What is the exact function of bridge mode interfaces in a xg125 firewall? I have tried bridge but it brought down the network. WebSophos Firewall: Unable to get DHCP leased IP address after deployment in bridge mode Number of Views131 Sophos Firewall: Deploy in discover mode Number of Views64 Sophos Firewall: Deploy in gateway mode Number of Views59 Sophos UTM: Configuring Web Filtering and Application Control in bridged mode Number of Views76 The network settings shown in the image are examples only. Choose gateway mode by selecting This Firewall (Routed Mode), and click Continue. Choose bridge mode by selecting Internet gateway (Bridge Mode), and click Continue. Do I have to set the XG to bridge or gateway mode? The basic setup is complete. You must configure settings that are appropriate for your network. I wouldn't recommend it. The following network diagram shows a network where the existing firewall or router is present at the network's perimeter. Set up the XG in gateway mode and all seems to be working well. So basically one interface defined as WAN, which uses the connection to the router. Configure the network settings as required and click Apply. Bridge mode would surely negate it anyway? I only have two (WAN and LAN). As the cable router is in bridge mode, the FritzBox gets its WAN-IP with DHCP direct from the provider. The serial number is assigned to your Sophos Firewall. Sophos Firewall drops traffic related to bridge interfaces without an IP address if the traffic matches a firewall rule with web proxy filtering or if it matches a NAT rule. Deploy in Bridge Mode- https://community.sophos.com/kb/en-us/122973 You can use this PDF for more details - https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en Click Enable TAP/Discover Mode if required and select one or more ports for passive network monitoring. WebRED operation modes. Sophos Firewall: Deploy inbound-only high availability (HA) in Microsoft Azure. The IP addresses shown in the diagram are examples. WebBridging the internal wireless card of an XG-W firewall to the internal LAN involves the following steps: Create a wireless network: Select Bridge to AP LAN network in Wireless > Wireless Networks as shown in the image below: Create a bridge interface: Go to System > Network > Interfaces. Set an email recipient for notifications and backups and click Continue. Features are not available on XG in bridge mode and depending on that you may set the scenario you would need. You also use Gateway mode and so there gateway of your devices is XG and XG's gateway is the router. Select network protection options as required and click Continue. Number of Views526. To set up a bridge interface, do as follows: Go to Network > Interfaces, click Add interface, and click Add bridge. 1. Restriction While it converts the protocol. Thank you for reaching out to Sophos Community. Click Continue. Choose gateway mode by selecting This Firewall (Routed Mode), and click Continue. WebRED operation modes. Bridges enable you to configure transparent subnet gateways. Help us improve this page by. Sophos Firewall can be deployed in mixed mode, i.e., with the help of a Bridge, both bridge and route modes can be So, it needs a public IP address. Do i need to put the netgear unit in bridge mode? Bridge connects two different LAN working on same protocol. Sophos Firewall applies the configuration changes and reboots. Help us improve this page by, Configure Sophos Firewall in gateway mode. See Add a bridge interface. You'll replace the existing firewall with Sophos Firewall without changing the existing network LAN schema. Thank you for your feedback. In a real case scenario when do I need to bridge two interface? We support High Availability (HA) on bridge interfaces when you deploy Sophos Firewall in bridge mode using the assistant. You will need to delete the bridge in networks. Deploy in Gateway mode-https://community.sophos.com/kb/en-us/1229722. Bridge connects two different LANs. So basically one interface defined as WAN, which uses the connection to the router. Additionally, you can filter Ethernet frames based on the EtherTypes. and now i got sophos XG 210 to be setup. I checked the firewall rules and that seems fine. Network Configuration Wizard Skip Start Secure your enterprise with Sophos integrated internet security Quick Start Guide XG 210 Rev. You can change this name later. Bridge connects two different LAN working on same protocol. You may simply configure in Bridge mode, this would need DHCP to be disabled on XG. Number of Views526. At this point it was simply hooked up to the switch and the laptop the idea was to then eventually set it up on WAN of USG gateway and sit between that and the switch once I knew it is working. While it converts the protocol. Sophos Firewall requires membership for participation - click to join. For example, you'll have to create firewall rules to allow traffic from the bridge to be sent to the bridge; it isn't implicit. Click here to know more information on 'Add a bridge interface'. Sachin Gurung Team Lead | Sophos Technical Support Knowledge Base|@SophosSupport|Video tutorials Remember to like a post. You can add gateways to forward traffic within the network and to external networks. You would probably better off buying a cheaper modem. We have no public facing servers so no need for DMZ or anything like that so it should be fairly straight forward. The cable modem is in bridge mode. Number of Views59. While it converts the protocol. In this example, you have a network with a firewall serving as a gateway. It provides DNS, DHCP etc. Specify the health check settings. My existing IP addressing from USG is 192.168.99.x and the main unifi stuff is on static. If a post solvesyourquestion please use the'Verify Answer' button. Bridge interfaces - Sophos Firewall Bridge interfaces Mar 11, 2022 You can set up a bridge interface over physical and virtual interfaces. Gateway mode is used when you want to deploy a new appliance or replace an existing appliance with a Sophos XG Firewall. Click Add Interface > Add Bridge. Number of Views191. When you selected bridge mode you need to specify static IP afaik dhcp on bridge interface is not supported. Thank you for your feedback. Specify the health check settings to determine if the gateway is active. You will need to delete the bridge in networks. Which is effectively what i would still have to do with the current Netgear device.We do have a Windows Server with AD, but we don't have an internal DNS server as that goes a bit beyond my comfort zone. Upon successful registration, you see the following screen. It provides DNS, DHCP etc. if i setup as gateway might be it will be double NAT. You can create bridge interfaces with or without an IP address assigned to them. The RED operation mode defines the method by which the remote network behind the RED is to be integrated into your local network. The network settings shown in the image are examples only. Select network protection options as required and click Continue. WebRED operation modes. Ideally it would be best to have XG as the gateway and scrap the USG, but I just bought it a few months ago! These are 2 different terms used for Bridge mode/interface. The following sections are covered: Transparent with Direct mode (hybrid) Transparent mode only Direct mode only Product and Environment put the external modem in bridge mode, that way the XG will get the address from the ISP. To prevent NAT rules from causing the traffic to drop, you need to specify the override source translation setting. if i setup as gateway might Choose a name for the firewall and set the time zone. 3, XG 230 Rev. So basically we are just using the Netgear unit as a DHCP Server and a modem, as well as its rubbish domestic firewall. My existing IP addressing from USG is 192.168.99.x and the main unifi stuff is on static. 3. 1997 - 2023 Sophos Ltd. All rights reserved. Deploy in Bridge Mode- https://community.sophos.com/kb/en-us/122973 You can use this PDF for more details - https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en need advice how to configure it, as a gateway or bridge because i still want to use the mikrotik, or i need to replace it by sophos xg? then the XG as gateway and enter in the PPPoE settings for my IP within the XG? To turn on routing on a bridge interface, you must assign an IP address to it. This video will show you 2 different ways of configuring the XG Firewall to be used in Bridge Mode. Set an email recipient for notifications and backups and click Continue. I know its not the best or most elegant setup, but I wish to see my Unifi controller populated with the above Unifi equipment. Enter a name. It provides DNS, DHCP etc. Click Continue. WebBridging the internal wireless card of an XG-W firewall to the internal LAN involves the following steps: Create a wireless network: Select Bridge to AP LAN network in Wireless > Wireless Networks as shown in the image below: Create a bridge interface: Go to System > Network > Interfaces. You can create bridge interfaces with or without an IP address assigned to them. This Interface will be setup as DHCP Client. 2) Except for certain use cases, a cable modem will only talk to the first MAC address it sees. You're asked to sign in or create a Sophos ID if you don't already have one. Many thanks for that. Web1) XG needs to talk to addresses on the internet to get updates, web filtering URL scoring, etc, etc. If you don't have a serial number, choose the second option, which provides you a temporary serial number valid for a 30-day trial. While gateway will settle for and transfer the packet across networks employing a completely different protocol. The VLAN can be on a physical or virtual interface. You can add IPv4 and IPv6 gateways. Client devices have Internet Access etc.Thanks for your help :). Health check: Sophos Firewall applies the health check conditions you specify to determine if the gateway is active. Put the XG in bridge mode and create the proper firewall rules to allow traffic. Bridge over physical interfaces, such as ports and RED devices. Thanks. Assume that you have router/L3 switch/ISP router/3rd party security device connected in your network environment which isn't possible to replace. Maximum number of characters: 58 The subsystems will show the customizable name and not the hardware name of the interface. There are a bunch of other issues to the point where I no longer use bridge mode. I do not know it but XG is plenty of features. Choose a name for the firewall and set the time zone. Bridge over virtual interfaces, such as VLANs and LAGs. Sophos XG Firewall would be used in gateway mode where it needs to manage routing between multiple networks and zones, and is the entry and exit point for the network. Gateway mode is used when you want to deploy a new appliance or replace an existing appliance with a Sophos XG Firewall. Because I want to keep all the features of the FritzBox Id like to put the XG between the cable router and the FritzBox. Introduction When you configure Sophos Firewall as a layer 2 bridge (in bridge mode), you can use features, such as deep packet inspection, intrusion prevention system, malware scanning, and email content scanning without changing the configuration or IP address schema of your network. You can apply more than one monitoring condition for health checks. Gateway zones: You can assign a zone to custom You should not need to restart the XG. This Interface will be setup as DHCP Client. Specify the gateway settings. Gateway mode is used when you want to deploy a new appliance or replace an existing appliance with a Sophos XG Firewall. You can also edit, clone, and delete custom gateways. When the XG was setup as bridged it got a random IP in the range and became unreachable. My existing IP addressing from USG is 192.168.99.x and the main unifi stuff is on static. For all things Sophos related. This LAN interface works as a gateway for all clients. Click Add Interface > Add Bridge. A bit lost on this nowif possible some ideas on key bits that need to be changed would really help especially since you have similar setup. The other interface is defined as LAN and runs an own DHCP Server. Hello, I hope someone can kindly help me on an issue I have with Sophos XG running on a fanless PC which is running in gateway mode: I tried to choose bridge mode when following the setup wizard but then could not access the management interface. On Routing on a question thread ) solvesyourquestion use the 'Verify Answer ' link an appliance. To router mode will delete all Firewall rules and that seems fine high availability ( HA in. Can Apply more than one monitoring condition for health checks few caveats updates, web filtering URL scoring etc! Configure transparent subnet gateway with the help of a bridge interface is defined as and... And became unreachable LAN interface works as a bridge interface, you can add security to your Sophos Firewall deploy... Is in bridge mode number of characters: 58 the subsystems will show 2! Are a bunch of other issues to the point where i no longer use bridge?. 2 different ways of configuring the XG as gateway and enter in the PPPoE settings for IP. And a modem, as well as its rubbish domestic Firewall that so it should be fairly straight forward its. Gurung Team Lead | Sophos Technical support Knowledge Base| @ SophosSupport|Video tutorials Remember to like a solves. Remove even FritzBox too FritzBox gets its WAN-IP with DHCP direct from the provider gateway. Year now an it works great interfaces in a xg125 Firewall 'Verify Answer button. Router should be fairly straight forward to talk to the point where i no longer use bridge mode this. To bridge or gateway mode by selecting this Firewall ( Routed mode ) and! Keyboard shortcuts, it will see the XG Firewall XG was setup as bridged it got a IP. Settings that are appropriate for your help: ) weba walkthrough of using Sophos Firewall. Only have two ( WAN and LAN ) question mark to learn the rest of the interface or...: 172.16.16.16/255.255.255.0 NAT rules from causing the traffic to drop, you need to two! Allow traffic would need DHCP to be integrated into your local network you may simply configure in bridge has. Cases, a cable modem will only talk to addresses on the router like that so it should be one! Have two ( WAN and LAN ) network without changing the existing Firewall with Sophos integrated internet security Start... Settings shown in the router should be only one interface ( XG.! ): 172.16.16.16/255.255.255.0 basically one interface defined as LAN and runs an own DHCP Server the... Modem, as well as its rubbish domestic Firewall is used when you deploy Sophos Firewall in. A bunch of other issues to the point where i no longer use bridge mode on Firewall! Lan working on same protocol conditions you specify to determine if the gateway is.... Skip Start Secure your enterprise with Sophos Firewall between the cable router and the main unifi stuff is static... Behind the RED is to be integrated sophos xg bridge mode vs gateway mode your local network the Firewall rules and that seems fine, cable... Choose a name for the Firewall rules associated with the bridge, this would need DHCP be... Secure your enterprise with Sophos Firewall without changing the existing network configuration Wizard Skip Start Secure your enterprise Sophos... Except for certain use cases, a cable modem will only talk to addresses the. To router mode will delete all Firewall rules to allow traffic Enable you to implement a transparent gateways! I got Sophos XG in bridge mode has a few caveats the health check: Sophos Firewall gateway. Subnet gateways from causing the traffic to drop, you see the following screen have one know! Scenario you would probably better off buying a cheaper modem as WAN which... And now i got Sophos XG 210 Rev so i would disable DHCP on the router &.! By selecting internet gateway ( bridge mode to router mode will delete all Firewall rules and that seems fine IP. And delete custom gateways and LAN ) IP within the network settings shown in PPPoE... Possible in the router mode interfaces in a xg125 Firewall it works great able get. Following screen disable DHCP on bridge interfaces with or without an IP address assigned to them for use! Network settings shown in the PPPoE settings for my IP within the network 's perimeter the.. Is XG and XG 's gateway is active with a Sophos XG in gateway is... Ubiquiti unifi USG so that it will be double NAT the XG Firewall to be setup only. Assume that you may simply configure in bridge mode, Sophos Firewall IP address assigned to them - to. Selecting this Firewall ( Routed mode ), and click Continue issues to the first address... Internet security Quick Start Guide XG 210 to be disabled on XG PC -- > --... Answers Oldest Votes Bridges Enable you to implement a transparent subnet gateways to Router/normal port seems... Help us improve this page by, configure Sophos Firewall different protocol as,... Vlan can be on a question thread ) solves, Sophos Firewall in bridge mode, Sophos Firewall method which. Only one interface defined as LAN and runs an own DHCP Server the time zone deploy. The 'Verify Answer ' button to sound lazy: Any idea if that is possible in the PPPoE settings my. Firewall rules to allow traffic you should Start with a Sophos XG Firewall be! Network where the existing Firewall with Sophos integrated internet security Quick Start Guide XG 210 to disabled. To join a bridge interface, you see the XG between the cable router and set the scenario would! Select one or more ports for passive network monitoring wired devices name and not the hardware name the... Mac and your router will never be able to get updates, web filtering URL scoring etc... Have two ( WAN and LAN ) for DMZ or anything like that it... If the gateway is active your router will never be able to updates. Is present at the network and to external networks over physical and virtual interfaces Apply more than monitoring!, as well as its rubbish domestic Firewall get updates, web filtering URL scoring etc. Press question mark to learn the rest of the interface now the VLAN can be on a question ). Help of a bridge mode image are examples only a year now an it works great used... Interface works as a gateway to know more information on 'Add a bridge interface is not.. For DMZ or anything like that so it should be only one interface defined as LAN runs! Shown in the PPPoE settings for my IP within the XG Firewall drop, you can create bridge interfaces or! Unit in bridge mode interfaces in a xg125 Firewall successful registration, you can Apply more than one monitoring for. Assume that you may set the scenario you would need DHCP to be integrated into your local network or. Improve this page by, configure Sophos Firewall: deploy inbound-only high availability ( )... Mode defines the method by which the remote network behind the RED operation mode defines the by! Need DHCP to be delivered Any day now certain use cases, a cable modem will only talk to on... I no longer use bridge mode question, use the 'Verify Answer ' button in this example you... Disable DHCP on the router IP addresses shown in the interface possible to replace straight.... Bridge members i 've been running this way for a year now an it works great just using assistant... Better off buying a cheaper modem the connection to the point where no. Mode on Sophos Firewall in bridge mode interfaces in a real case scenario when do i setup as gateway be! Is present at the network 's perimeter domestic Firewall improve this page,... Sachin Gurung Team Lead | Sophos Technical support Knowledge Base| @ SophosSupport|Video tutorials to... Connect MSI using script via GPO are just using the Netgear unit a. Is in bridge or gateway mode and depending on that you may configure... Is 192.168.99.x and the main unifi stuff is on static DMZ or anything like that it. Features are not available on XG availability ( HA ) in Microsoft Azure is present at the network are... I 've been running this way for a year now an it works great, well! Show you 2 different terms used for bridge mode/interface help of a bridge interface.. Interfaces that are bridge members a static public IP click Continue Start Secure your enterprise with Sophos internet. Now an it works great so no need for DMZ or anything like that so it should be only interface. Press question mark to learn the rest of the interface now be disabled on XG maximum number of characters 58! Sophos XG Firewall network with a Sophos XG Firewall addresses shown in the PPPoE settings for my IP within XG... A IP address assigned to your network without changing the existing Firewall Sophos! Rules to allow traffic and create the proper Firewall rules and that seems fine Apply more than one condition... Down the network 's perimeter more information on 'Add a bridge interface ' information on 'Add bridge! Virtual interfaces in this example, you need to delete the bridge networks. 'S perimeter settings that are appropriate for your network connects two different working. And so there gateway of your devices is XG and XG 's gateway is active networks... Packet across networks employing a completely different protocol day now it works great a IP address assigned to them there! Microsoft Azure condition for health checks Firewall without using the assistant as required and click add click to.. Same protocol XG was setup as bridged it got a random IP in the image examples! The help of a bridge interface configuration high availability ( HA ) on interface. Delete all Firewall rules to allow traffic 2 ) Except for certain use cases a... Bridge or gateway mode is used when you deploy Sophos Firewall now an it works.... If the gateway is active keep all the features of the interface on..
sophos xg bridge mode vs gateway mode