Hello, can you continue to use the SGs at the secondary locations as RED devices with an XGS or should you switch to an SD-RED 20 or SD-RED 60? Thank you very much

Hello - I have an XGS 2100 at HQ. We were using a RED device to connect the branch office Phone and LAN traffic via VPN to the HQ PBX/LAN and everything worked fine. Given the rollout of the latest OS, the RED is no longer compatible, so we are attempting…

Buenas, necesito ayuda, porque no consigo por mis medios.. La SubredLocal la llamaremos Subred1 Tengo un Sophos XG, que esta conectado a otro host a través de una IPsec "Interfaz de Tunel", la llamaremos Subred2. Luego tengo usuarios que se conectan…

Good Day Members, I Trust you are well. We currently have 5 sites with site to site SSL VPN configured. We are investigating SD-WAN connection Group in Sophos Central. This will assist us in setting a couple defaults policies that that would be the same…

Hi all, i have the following issue and hope that someone can give me a hint or two: We're using a remote access connection (SSL VPN) to our Sophos XG. On the Sophos XG, we have an IPSec tunnel to another router (pfsense). Both work great. Now, we…

Hello, We have created the IPSec tunnel (uses NAT) to application provider dc. Internal network is translated to NAT IP (provided by application provider). Tunnel is working. Now, we have to add SSL vpn remote access network to that IPSec tunnel…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Facts about network speed …

Hello Sophos community, I am trying to set up a szenario where I have to send IPsec Remote access traffic through a Site-to-Site IPsec VPN with 1:n NAT translation on a XGS Firewall. It seems to work on UTM: Sending Remote access traffic through…

Hello, I would like to know how I have to proceed on the XG to enable IT supporters who are connected to the company firewall of the IT service provider via C2S-VPN or Sophos RED to access the customer networks directly that are connected to the XG of…

I have 2 XGS "A" and XGS "B", connected by a Site to Site IPSEC tunnel. Connections work fine. Now i have to have access to a network at "B" by a Remote-VPN connection at "A" Remote-VPN => "A" <=> "B" The vurtuell network of the Remote …

Hi All, If anyone can point me in the direction of what I should be researching, that would be amazing. In the past, I have setup a site to site from our office to Azure. We have a Sophos XG in the office that connects to our Azure GW. Anyone in the…

Hallo zusammen, Irgendwie komme ich nicht weiter, vielleicht kann mir ja jemand helfen. Wir haben mehrere Geräte (Router) beim Kunden wo per IPsec Tunnel mit unsere XG verbunden sind soweit so gut. Jetzt ist es so das einige Mitarbeiter aus dem…

Hi all, I have a HQ site and a branch site. There's a policy-based ipsec site2site connection established the sites. Branch site has SSLVPN(OpennVPN 10.81.255.0/24) server running and is used as default gateway. Branch site also has an internal…

I have an SSLVPN profile set up for my remote users In the permissioned networks I have only our office supernet. When connected to the SSLVPN I can reach other resources through our Site-to-Site IPSec VPNs. These subnets are not encompassed in our…

Hello community, i have 2 Site2Site IPsec connections and 2 local LAN on the XG. VPN connection 1: Local Subnet: 192.168.1.0/24 Remote Subnet: 172.31.0.0/24 VPN connection 2: Local Subnet: 192.168.2.0/24 Remote Subnet: 192.168.120.0/24 How can…

I am using XG210 (SFOS 18.0.5 MR-5-Build586) and Sophos Connect 2.1.20. SSL VPN and IPSEC VPN for Remote Access is configured as "use as default gateway" forcing all remote traffic through the XG. Remote users are able to access LAN resources, that…

Hi all, I have a problem with remote SSL VPN users that want to access locations that are connected with a S2S tunnel. Followed the guide below but can't seem to get it working. Sophos XG Firewall: How to configure access for SSL VPN remote users…

Hi i have an IPsec VPN from XG to Azure (only LAN subnet) who is working fine, since i added the User SSL vpn subnet to allow ssl vpn user to access to Azure (yet I have 2 subnet in my site to site setup Azure LAN + 10.81.234.0/24) the connection…

Hi, I have set an IPSec VPN connection and successfully connected using a local user account. Problem is I am unable to get it to connect using an AD login. The errors is "User Authentication Failed" I have a SSL VPN connection that does successfully…

Hi, We have a problem randomly happening. Users are using to AD Auth for SSLVPN. And sometimes gives an error. When I was check the SSLVPN application; "auth error". After then was check the Sophos XG and gives a same error. If i do manually disconnect…

Hello Sophos Community, I am trying to nail down a massive performance issue that prevents us from copying greater files between headoffice and branchoffice over site-to-site vpn tunnels. Referencing the following thread, this pretty much describes…

So I have a weird scenario, after upgrading our XG firewalls to version 18 our site to site IPSEC tunnels randomly stop passing print jobs but WILL allow scans from same printer. Downgrading to version 17.x.x everything would work fine. Unfortunately…

Good afternoon, I have a problem to communicate two remote offices to each other through the head office through SSL VPN. From either of the two remote offices, the services available at the head office and from the central office to any of the two…

Hello, I have succesfully connected a XG210 and a XG125 with RED site-to-site tunnel. From the network of the XG210 (10.69.95.0) i can ping the network of the XG125 (10.69.94.0). But when a client connects via SSL VPN on the XG210 he could not ping…

Hi, I'm looking for some assistance with getting an SSL site-to-site VPN working between a Sophos UTM running the latest 9.509-3 software and a Sophos XG appliance running the latest v17.0.6 MR6 firmware. I did managed to get this working a few months…