Hi
Ok so I might be rather dim (and I hope not as I am supposedly a certified SFOS Architect!) but we are deploying a 10 SD-WAN site to site mesh of XGS firewalls with multiple WAN links into each site for a customer using SD-WAN Central Orchestration…
Hello, I have to create several site-to-site IPsec between Fortigate Firewall and our Head Office Sophos Firewall. All connections must go to the same subnet in our Head Office. I've configured the Sophos as "Respond Only", the subnets are configured…
Hallo zusammen
Vielleicht hat jemand von euch noch eine Idee wo ich suchen kann oder was falsch ist.
Wir haben auf 2 Sophos XGS107 immer wieder Verbindungsunterbrüche ins Internet. Das Problem ist das es nicht komplette Unterbrüche sind. Ich probiere…
Hello everyone,
To configure a site-to-site VPN between two XGS 116, is it better to configure encryption as IKEV2 on both firewalls or DefautHeadOffice for the headquarters and DafautBranchOffice for the branch?
Thanks André Soares
I have a new Sophos XGS116 I have just installed replacing a Cisco ASA5506. (Site B)
I setup the s2s with the same profile and settings (not subnet or public IP) as I use on another XGS116 (Site C) for the same customer.
Both these 116s have a site…
Been using 1 same preshared keys for over 10 sites that backhaul back to our HQ till now. However eversince v18 onwards, it's getting more and more unstable. After restarting our HQ Firewall, at least 3-4 sites tunnels wouldn't up. Ticked the create firewall…
Hi,
We have an IPSec s2s connection, and there is a remote subnet 10.0.0.0/255.255.255.0.
Migration was done with configuration export/import and it seemed almost everything migrated successfully (only some firewall rules involvind ad users where…
2 XGS connected via ISP PTP fiber as primary.
Each XGS has a second ISP which will be used for a IPSEC tunnel in case the primary link fails.
Currently OSPF is in use.
I have a IPSec VPN between 2 XGS using a tunnel. Both XFRM interfaces are 192…
Hello,
I have a strange issue on site to site VPN between two Sophos XG firewall. The site to site VPN was built with class C subnets as below.
Site A - 192.168.1.0/24
Site B - 192.168.8.0/24
The sophos XG firewall generated VPN rule on top permit…
Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment.
Table of Contents
Overview
Product and Prerequisites …
Hey All,
I've created an IPsec tunnel between my Sophos XG unit and a Meraki. On the Sophos unit, the "Connection" dot is yellow and when I click for more info, it shows that only one of two subnets is accessible.
Clearly, the IPsec settings are correct…
Hello, everybody! Got a quick question for the experts out there.
I'm trying to set up an IPsec VPN Failover Group between two XGS firewalls, HQ and Branch, each with two WAN connections. I created 4 tunnels (two for each WAN connection) and added them…
Hallo zusammen, folgendes Thema bescheert uns aktuell graue Haare.
Eventuell etwas Offtopic.
Folgender Aufbau: 2 Internet Anschlüsse Kabel BW Business mit Fritz!Box Cable als Gateway. Dahinter die Sophos XGS.
Hinter der Sophos befindet sich eine…
Hi all
I have a site where the XGS2100 is currently set to authenticate against the local AD Domain Controller. The DC is planned to move off-site and so the XGS will need to authenticate to the DC via IPSEC - the DC will be hosted behind an OpnSense…
Hi all,
I have a working IPSec tunnel from my Sophos XG to my UniFi UDM at a remote site. I have many VLANS at the remote site. The XG can connect to the UDM default VLAN, but not any others. Does anyone have experience with this? Thanks!
Hello,
I have setup a site to site IPsec VPN between a Sophos XG (Responder) & a DrayTek (Initiator) router. Everything is working as it should apart from a disconnection every so often. I believe this has something to do with the re-key event that…
Buenas,
necesito ayuda, porque no consigo por mis medios..
La SubredLocal la llamaremos Subred1
Tengo un Sophos XG, que esta conectado a otro host a través de una IPsec "Interfaz de Tunel", la llamaremos Subred2.
Luego tengo usuarios que se conectan…
Greetings,
We've set up a Site to Site VPN in our Main and branch office, they were active but we're still unable to ping the ip address from the main. Can anybody help me with this?? or any configurations i need to check please? thank you.
The information provided by clients is as below
From our admin side, we already amended the information such as local subnet and remote subnet as below except the interface wan1
Do we need to match the interface also? We do not know how…
Hello everyone,
I have successfully established an IPSec site-to-site connection between a SOPHOS XGS firewall and a RUT240 from Teltonika.
A ping from the Teltonika router to the SOPHOS firewall works. A ping to an end device behind the SOPHOS firewall…
I'm having issue with my IPSEC-site-to-site connection. The IPSEC vpn cannot be established. Im having error " unable to resolve %any, retrying in 60s" when checking the strongswan.log
Here is the full logs:
loading secrets from '/_conf/ipsec/ipsec…
I have setup IP-Sec between head office and branch office few days back. My branch office is working perfectly fine and accessing all the resources on the head office but on the other hand when i try to access or ping any resource on branch office from…
Hi All,
We have a question in Full tunnel site to site IPsec VPN. When we create a local 192.168.183.50/32 to remote Any site to site IPsec VPN.
We found that XG's own routing will also be carried out through this VPN tunnel.
There…
