I am working on a project and was wondering if it is possible to create Sophos IPsec Tunnel interface to connect to Azure VPN tunnel interface. Basically Route based VPN to azure.

Hi Everyone, Currently we have a working solution when using SophosXG 17 , but currently it seems that port forwarding isnt working like we expected on XG 18, While it was massively simply before, we are unable to make it work on our Azure environment…

We enabled NPS Extension for Azure MFA and NCFCSI reports a lack of internet connection. In fact, Internet access was working. However, the NCFCI message caused MS services (Outlook/OneDrive) to not work. After we deactivated STATS, the problem disappeared…

Hi, I'm having an issue where I can't access Azure resources when connected to the SSL-VPN. I have a site to site tunnel to Azure and can access the servers fine on the LAN and when I connect to the SSL-VPN I can access internal resources directly…

We have a few WVD host pools with Azure WVD running Windows Defender and we also have Sophos Endpoint and Server protected on laptops and servers. I want to test Sophos protection on the WVD machines, there are Windows 10 20H2 Mulit-Session VM's. …

Hi I have existing 10.10.0.0/16 Subnet coming from Azure to XG. I have now created a newt Vnet in Azure 10.40.0.0/16 and want to route this within Azure. Route Table in Azure is done, but I can't get it route through XG. I've replicated the…

Hello, we are using a XG310 (SFOS 18.0.3 MR-3) and use a IPSec tunnel to Azure to use the Azure AD on the XG310. That works well. But when the IPSec connection is lost, the XG is not reconnecting to the Azure VPN Gateway. I have no Error Information…

Hi All, My firewall has 2 WAN links which configured 2 separate Azure site to site VPN links. Added 1 Inbound and 1 Outbound rules with load balance in the Automatic VPN Rules category. Also configured a fail over group for those 2 Azure Site to Site…

Gretings i had a firewall on azure and a local firewall, i've stabilished the IPSEC VPN on from one to another, but it doesn't comunicate properly, i had the 10.1.2.0/24 on azure and a 192.168.10.0/24 and 192.168.0.0/24 on my local network, from azure…

Hi We want to establish a hub and spoke configuration for vNETs in Azure and place our Sophos XG virtual appliance in the Hub vNET. The Hub vNET will then be the default gateway for internet access and a S2S IPSEC to an on-premise Cisco ASA. All "spoke…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview: Azure portal configuration…

I have a VPN tunnel enabled to our Sophos XG in Azure. I then have a resource group peered to that group with the Firewall. I have communication from on-prem to The firewall resource group, and Communication between the resource groups but no matter what…

Hi All, As the XG Firewall on Microsoft Azure is deployed as a virtual machine, a customer who has been trialing it may wish to convert their trial license into a paid license and avoid the need to perform a redeployment. This is updated on our License…

Hi Guyzz , We are in middle of establish the cyberaom IPSEC tunnel with Azure VPN (S2S). But as i checked with our vendor it's saying Cyberaom 100ing only support IKEv1. So can i configure it with Azure VPN through the IKEv1? or do i need to upgrade…

Folgendes Problem: Seit ca 2 Wochen kann meine SG 135 meine VMs in Azure nicht mehr erreichen, das hat zurfolge, dass die Authentifizierung über adirectory nicht mehr funktioniert. Aus den zwei lokalen Netzen sind die VMs jedoch problemlos ereichbar…

Today when talking about the Azure blob storage and the levels of protection that you have available, there are two main categories - authentication and authorization-based protections using storage account access keys and SAS tokens AND the newly released…

Here's a new video that covers how to deploy the Sophos XG inbound HA in Azure. https://youtu.be/AyWJukXnMHI It goes through the content in this KB - community.sophos.com/.../127934

Hi, I have a lot to do with Azure and I'd like to write the syslog of my UTM at home in my private OMS Log Analytics. ( https://azure.microsoft.com/en-us/services/log-analytics/ ) I'm a little surprised that I have not found any information on the…

Hello Community, XG Firewall v17 is now on the list of validated VPN devices for Microsoft Azure. A VPN device, such as the XG, is required to configure a Site-to-Site (S2S) cross-premises VPN connection using a VPN gateway. Site-to-Site connections…

Happy new year everyone! Here are two new recordings on how to secure an Azure App Service (PaaS offering) using the Sophos XG firewall. This is a useful resource to guide partners or customers that are implementing a lift and re-platform cloud adoption…

I have set up an ipSEC tunnel between our on-prem UTM 9 device and Microsoft Azure. The plan is to have a server in Azure that must be accessible from the local network. However, I can't ping the server from the on-prem network, Pinging from VM on the…

This new KB article provides step-by-step instructions on how to deploy XG Firewalls in HA in your Microsoft Azure environment. It has been divided into 3 sections: 1. Workers configuration 2. Controller configuration 3. Observer configuration …

Hi everyone, I've followed the instructions indicated for sophos - azure vpn and it works well - except for the fact that I get packets dropped every few minutes. For example, if I run an RDP to a server on the auzre platform, my RDP session will…

Hi, I am trying do configure the following scenario. Azure: - Virtual LAN (10.200.0.0/24) with Virtual Network Gateway (10.200.1.254 with the LAN 10.200.1.0/24) - VPN S2S connection with PSK - BGP ASN 65515 XG - LAN (192.168.97.0…

I have networking condition in Azure and believe I could be close based on what I've been reading. As it stands, I can ping/access the Sophos Azure XG from the Azure VM but not the reverse. Meaning I cannot ping the Azure VM from the XG. Packet cap shows…