How do I connect a NAS that has Wireguard support to Sophos firewall?

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

jang430 — Mon, 21 Aug 2023 02:00:16 GMT

Can I know what particular firewall settings should be made? Or is it just opening ports? Do you know the ports WireGuard is using? So are you saying that Sophos will allow WireGuard client to connect to it? Have this been tried?

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

jang430 — Mon, 21 Aug 2023 01:59:13 GMT

Am I correct that Unraid also has a WireGuard client and not just a WireGuard server? When you say set-up tunnel with keys and IPs... does it matter if Sophos can accept WireGuard connections? I know it does connect OpenVPN clients.

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

jang430 — Mon, 21 Aug 2023 01:57:11 GMT

I fear this may be too much for the nas. It's old, and am running slow. But I agree, this will work. I'm trying to use whatever built-in functionality on the NAS though. Cleaner.

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

Thomas Wordhunt — Sun, 20 Aug 2023 09:17:09 GMT

[deleted]

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

alvaro mathis — Sat, 12 Aug 2023 20:20:58 GMT

[deleted]

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

AstaroNBack — Thu, 10 Aug 2023 19:06:56 GMT

You could purchase a new or used Sophos RED 20 and solve this issue. I had a remote worker who's had intermittent issues with software VPN to XGS. Since we installed a RED at her place, ZERO problems.

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

Packet0wl — Tue, 08 Aug 2023 05:38:29 GMT

Wireguard and IPSEC are two different protocols. Sophos Firewall doesn't support wireguard for site-to-site VPNs. However, IPSEC in SF is based on Strongswan.

You can launch a Linux VM on your Unraid NAS and install strongswan packages. Create a IPSec Server on Sophos Firewall, and connect to it using the VM on Unraid. Share the networks you want to over this tunnel.

I have tried this with TrueNAS and it does work!

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

jang430 — Tue, 18 Jul 2023 08:39:57 GMT

When you say configure the f/w to allow incoming and outgoing Wireguard traffic, this is on the Sophos f/w?

So can the remote NAS (that is behind a basic router without VPN support) have a VPN Client installed, and connect to Sophos f/w?

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

mike oliver — Tue, 18 Jul 2023 08:28:41 GMT

[deleted]

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

Bharat J — Tue, 18 Jul 2023 07:54:51 GMT

Time to add router which supports IPsec VPN for remote site-to-site connectivity

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

Vivek Jagad — Tue, 18 Jul 2023 07:43:03 GMT

Hey jang430 ,

They have a KBA for it - https://www.tp-link.com/us/support/faq/3642/#

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

jang430 — Tue, 18 Jul 2023 07:14:00 GMT

I don't think the TP-Link Deco X50 supports IPSec VPN? Do they? As far as I know, they are very basic home routers.

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

Bharat J — Tue, 18 Jul 2023 07:11:55 GMT

Hi jang430

Did you try with IPSec VPN between Sophos XG and remote router which has NAS directly connected ?

Regards

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

jang430 — Tue, 18 Jul 2023 05:47:42 GMT

Hello. The remote site is using TP-Link Deco router, that has limited functionality. I'd like to connect my network to the remote network so I can access the NAS. Since the router is basic, I am thinking to use the NAS with it's wireguard server (or maybe client) to connect that NAS to my Sophos firewall, so I can manage the remote NAS.

RE: How do I connect a NAS that has Wireguard support to Sophos firewall?

Erick Jan — Mon, 17 Jul 2023 14:42:36 GMT

Hi jang430,

Thank you for reaching out to Sophos Community.

Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue?

Would it be possible to give us more information?

What is your NAS's gateway device(remote site) to connect to Sophos Firewall?
To better understand, can you share the network topology?

For Implementation requests, you may try contacting our Professional Services to better assist you with all your requirements. However, kindly be advised that this is a paid service.