SD-WAN Connection group

Question

Hi, I have a dedicated WAN LINK in a router that does not support bridge mode. 
 I want to do an SD-WAN connection group and for that I have to tell my ISP what ports I need them to port forward 
 Does anyone know the exacly ports that Sophos Firewall use for de SD-WAN connection?

Raphael Alganes · Answer

Hello Diogo, 
 Thanks for reaching out to Sophos Community. 
 To confirm do, you have a NATed connection from your ISP router to your Sophos Firewall? you should establish VPN tunnel or via an MPLS link, Establishing IPsec tunnel usually requires these protocols and should be configured for e.g. Inbound NAT from ISP Router -> Branch Sophos Firewall 
 
 If your use case should be similar to an HQ that has static IP and branch has private/ NATed/Dynamic IP, you should be able to follow this doc guide to establish VPN: https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/HowToArticles/S2sVPNIPsecCreateBehindRouter/index.html 
 and then SDWAN: https://techvids.sophos.com/watch/wa9zCk2gTKVmiekmybyux7 
 Hope this helps. Many thanks for your time and patience and thank you for choosing Sophos. 
 Cheers,