Sophos XG with RED 60 remote sites - Main office to Remote site LAN

Question

3 remote sites with RED 60 devices connected to main office Sophos XG 
 Unable to access devices at remote office from main office 
 RED Operation Mode Standard/Unified 
 RED Interfaces in Zone: LAN 
 Already added Firewall Rule - Source/Destination LAN - ANY 
 Is there something I'm missing. Thanks

emmosophos · Accepted Answer

Hello there, 
 So it looks you have a huge overlap of networks due to the /16 you are using on your Main Office. 
 Either you can change your RED subnets to be maybe on a non /16 overlapping network or try bridging them into the LAN 
 https://support.sophos.com/support/s/article/KB-000035548?language=en_US 
 Regards,

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community. 
 If you SSH into the XG and press (5>3) to land in the Advanced Shell does the following command shows the correct RED interface? 
 # ip route get x.x.x.x (where x.x.x.x is the IP of a device behind the RED device) 
 If you see the correct RED interface. 
 Try a Ping from a computer behind the XG going to a device behind the RED and see where the XG is seeing the packets 
 # tcpdump -eni any host x.x.x.x (where x.x.x.x is the IP of a device behind the RED device) 
 Additionally please also run a Packet Capture from the GUI of the XG. 
 And finally, check if you don't have an incorrect Static Route or SD-WAN and not overlapping networks. 
 Please post screenshots. 
 Regards,

Sophos User4767 · Answer

Yup that is it - oh well off to yell at project team who implemented this :) Thanks

Sophos XG with RED 60 remote sites - Main office to Remote site LAN

Top Replies