branch office VPN on brand new firewall

Hello,

this is not question. Just one experience which surprised me.

I got new firewall for customer which used XG platform. Made migration of configuration and due to terms of old licence I was in hurry with implementation.

I noticed that new firewall came with postponed term of activation. I was a few days before license Start Date.

I thougt no problem. I will use trial license.

But - trial license activates all of the features, but not Base Firewall !

It seemed that everything is working. But branch office VPNs worked in one direction only. From outside to inside. And traffic to inside was NATted with source MASQ.

Returning traffic to VPN worked.

Traffic which would go to VPN was not working (was sent to Inetrenet instead to VPN tunnel; because of NAT).

After solving of Base Firewall activation (thanks to Sophos licensing team), branch office VPNs strated to work.

Best regards,

Petr



Edited TAGs
[edited by: emmosophos at 5:24 PM (GMT -7) on 25 Mar 2024]
Parents Reply Children
No Data