This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Azure Site-to-Site VPN - Between Sophos in Azure and On-prem Firewall

i have a Sophos Firewall configured in Azure to protect the Virtual Servers and need configuration steps for Site to Site configuration between Sophos configured in Azure and On premises Firewall.

Please guide me with the configuration.

I have attached the Topology for reference.

This thread was automatically locked due to age.

Parents

0 FloSupport over 5 years ago
Hi Vicky Raj

Here's are the in-depth articles related to this topic

Sophos XG Firewall v17: How to establish a Site-to-Site IPsec VPN to Microsoft Azure

Sophos XG Firewall v17: How to configure a site to site IPsec VPN with multiple SAs to a route based Azure VPN gateway

Regards,
Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Vicky Raj over 5 years ago in reply to FloSupport

Hi Team,

Thanks for the response and I have went through the documents.

But the document explains only about to create S2S VPN from Azure native VPN with Sophos XG in On premises. But what I have requested is to create a S2S between Sophos which is implemented in Azure and On-premises Firewall.

Regards,

Vikneswaran R
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 5 years ago in reply to Vicky Raj
Hi Vicky Raj

In that case, you would simply follow this article:

Sophos XG Firewall: How to set a Site-to-Site IPsec VPN connection using a preshared key

Ensure that you have the proper Network ACL's configured on Azure to allow this connection.

Regards.
Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Vicky Raj over 5 years ago in reply to FloSupport

Thanks for the response. but again the document refers the configuring S2S between two dedicated firewall which has a public IP configured in WAN interface. but in Azure, there is no public IP assigned in the WAN interface. Please look at the attached diagram for reference.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Vicky Raj

XG in Azure will use the same mechanism like a XG behind a NAT Gateway.

First of all, you have to decide, which Site should initial the connection.

You should consider to use a public DNS Record. Azure will give you one, as far as i know.

So if you want to connect from Azure to On Prem XG, simply build up the tunnel from Azure (initial connection) to on prem.

Or vise versa. It is up to you.

https://community.sophos.com/kb/en-us/123140

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 5 years ago in reply to Vicky Raj

XG in Azure will use the same mechanism like a XG behind a NAT Gateway.

First of all, you have to decide, which Site should initial the connection.

You should consider to use a public DNS Record. Azure will give you one, as far as i know.

So if you want to connect from Azure to On Prem XG, simply build up the tunnel from Azure (initial connection) to on prem.

Or vise versa. It is up to you.

https://community.sophos.com/kb/en-us/123140

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data