ADDING A STATIC ROUTE DISCONNECTS SITE TO SITE CONNECTED DEVICES

Hi Timothy Wanume,

Policy base site to site IPsec VPN doesn't not required to add static route as per the snapshot 

Try route base vpn if you would like to play with static route

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/HowToArticles/S2sVPNRouteBasedCreate/index.html 

Thanks and Regards

Hello Bharat J as in the diagram above, I have a site to site VPN and a fibre link between the 2 sophos. i want the fibre to be a backup or failover for the vpn in case there is no internet on one of the sites

Hi Timothy Wanume, 

Please refer and configure Sophos Firewall: Configure an IPsec VPN failover with multiple connections

For route base refer the kb https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/HowToArticles/S2sVPNRouteBasedWithISPsConfigure/index.html 

Regards

Hello Timothy,

have a look here: https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/IPsec/S2sVPNIPsecRouteBased/index.html