How to make Destination IPs, which are both IPSec VPN hosts and available through fibre connections alternative routes?

Question

Hi 
 I am a little stumped about how to create alternative routes for a group of IP addresses, that are reachable through two ways: 
 1. They are host IPs defined in an IPSEC VPN, setup on the Sophos UTM 9, 
 2. They are available through a route on a Cisco router, that is on the same internal subnet as the Sophos. 
 The home network server IPs use the Sophos as their gateway IP to everywhere. 
 Please what is the best means of making the destination IPs reachable to the server network through the VPN and the Cisco device at the same time (alternative routes)? 
 Diagram below:

BAlfson · Answer

You are more of an artist than I! 
 Replace the current 'IPsec Connection' with a new one with the "(Network)" objects for the 192.168.2.0/24 and 10.1.1.0/24 LANs in 'Local Networks'. Select 'Automatic Firewall Rules'. If you want the VPN to be the sole path for traffic from the UTM, save the configuration. If you want to use Static Routes to manage where which path the traffic takes, select 'Bind tunnel to local interface' before you save. 
 Although the following article is in the UTM Wiki in German, all of the pictures are of WebAdmin in English: Sophos UTM multiple S2S IPsec VPN mit Failover &ndash; Tutorial (DE) . You don't need to build the second tunnel, just use a lower priority route via 192.168.2.250 if you want the primary route to be via the VPN. 
 Cheers - Bob