Upgrade from XG to XGS Firewall

Hi Andyhaigh,

Thank you for reaching out to Sophos Community.

For your queries, kindly see below.

We have a site to site IPSEC tunnel and users use Sophos Connect to connect using SSL VPN, but these should still work as we are doing an confiuration import.

• This will still work as long as you haven't removed the XG330

Currently the XG330 is registered in Sophos Central, will this need to be removed and re-added?

• After Migration, you need to remove the XG330 and register the new Firewall

Also in MDR, again does it need to be re-added?

• No Need

Any gotchas I should be aware of?

• Kindly make sure ATP & IPS are turned on after the migration and that the Sophos Firewall is registered to the central.

In addition, I'll add here KB for best practice

•  Sophos Firewall: Best practice for Sophos Firewall firmware upgrade 
• Backup and restore

Hi Erick,

The XG330 is being replaced with the XGS3100, the IPSEC tunnel is currently between the XG330 and an XGS126w, so I am assuming that when the XGS3100 is installed the IPSEC tunnel will come up between the XGS3100 and the XGS126w?

The users connecting via Sophos connect using SSL VPN will just carry on working, as if nothing had happened?

Thanks

Andy

Hi Andy,

Yes, that is correct. This should work once the tunnel is up.

However, if any changes are made to the VPN configuration, you may check the following Recommended Read.

 Sophos Firewall: When will SSL VPN users need to re-download the configuration 

I am also assuming that any connected RED's will just reconnect once the configuration is restored to the new XGS device.

Thanks

Andy

I am also assuming that any connected RED's will just reconnect once the configuration is restored to the new XGS device.

Thanks

Andy