Feature Request - Add non-WAN-Ports to "Listening interface" in IPSec

I have one use case in my entire career i've done that in.

Do you have some examples of your usage scenarios? That will help Sophos with their prioritisation of features.

Emile

I hope I can make it clear enough. For example, we have some MPLS connections to external sites that we run on our central firewall. The connection to these locations must of course be encrypted. A very good possibility would be IPSec, of course. Unfortunately we still have to implement this with several firewalls. These could be saved in the future.

Another example are various wireless links that are not within our area of responsibility and are required in addition to the WAN ports. These must also be encrypted separately.

Since this is already possible in the UTM, I cannot imagine that the implementation is impossible.

You are right, UTM can do it.

RichBaldry are IPSEC VPN listeners going to be opened up to listen from any interface in the future? At the moment, they're only available for use if they are tagged as the LAN zone.

Emile

Hi Steppenwolf.

Thank you for the feedback. We value your input.

Your feature request will be added to our list for consideration in a future release.

Jan