RED VPN specs

Hello Alex NC ,

Thank you for reaching out to the community, Sophos Remote Ethernet Device (RED) is a small network appliance, designed to be as simple to deploy as possible. Its main purpose is to provide a secure tunnel from its deployment location to a Sophos firewall.

There is no user interface on the RED appliance. It is designed to be fully configured and managed from a Sophos firewall. RED devices can be shipped to a remote site, connected to any DHCP connection to the internet, and be fully configured by a remote administrator with no prior knowledge of the site, and no need to walk local personnel through technical setup steps. 

You can refer the guide here - https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SystemServices/RED/index.html
> RED (Remote Ethernet Device) 

It uses the following ports:

> TCP port 3400 (Control Connection, using SSL, authenticated with mutual X509 cert check)

> UDP port 3410 (Encapsulated traffic, AES256 (enc), SHA1-HMAC (auth))

Hello,

Thanks for all you answers.

One last question about the certificates.

How are they generated? Are they periodically renewed?

Yes, You can refer RED - https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SystemServices/RED/index.html

Sophos Firewall uses these details to generate a certificate for secure RED communication.

Make sure the email address you enter here is up to date and accurate. When you add the RED device to a firewall or move it to another firewall, the provisioning server sends the unlock code to this email address.