We set a local ip to our branch office 13.1 to the microtik switch and configured the IP sec in sophos firewall and established the connection and connection also up. We created the policies in microtik and added the IP address. Then established the connection…

Hello I have two branches, both with Sophos firewalls. I have run fibre between these branches; how should I connect them so that they share resources? I have configured a site-to Site VPN, but what if one side loses internet? I need a backup.

Hello dear Sophos Forum, I have set up a Site-to-Site VPN connection between a NAS and 2 ESXi servers with a Sophos XGS. Setting up the connection was no problem, but I still can't reach the ESXi servers from the NAS, even though every port is allowed…

Summary: AT&T provides us a /30 for our equipment and a /29 routed subnet. We are currently using several of these addresses as Alias NAT'd for hosted services. We have a vendor who wants to establish a VPN tunnel to their remote site via a cisco 4300…

Hallo Ich habe zwei Firewalls Head Office (Bach) und Filiale (Dornbirn) XG135 SFOS 19.5 Die WAN und Router Adressen sind in der Grafik nicht real. Bach: Ist hinter einem router welcher im bridge mode arbeitet. Das WAN interface ist nicht direkt…

I'm migrating from a UTM to an XG so i'm trying to replicate a config that already existed. I have the IPSEC VPN setup and the tunnel comes up. The VPN selector on my side only has a /30 I need to have the rest of the organisation talk through this VPN…

Good morning. I don't know if someone can help me as I have been trying various configurations and conducting tests without any success, and I'm not sure if the XG allows what I need. I have 2 offices: Office A has a public IP addressing (e.g.,…

I have established a VPN Tunnel between * Sophos XG (Head Office) * FritzBox (Branch Office) I can access Head Office Resources from Brach Office. But I cannot access the internet from Branch Office. I have created a Firewall Rule to allow Branch…

So we have a pretty new XGS 2300 and we have some cases where we connect to our customers servers over an Ipsec Site-to-Site tunnel with RDP. the tunnel is stable but sometimes the remote desktop session freezes for a short time. I looked into the…

there is internet before and after connecting vpn but every time I ping anything the result is always "Request time out". however after conecting to vpn the internet is slowing and cant ping servers Help me to fix this.

I am trying to configure ipsec Site-to-site VPN between the Head and branch offices. The Head office is a Sophos UTM SG 210 configured as the responder (Repond-Only), and the branch Firewall is a Sophos XGS configured as the initiator. The Head office…

Hi, we have a customer, who has about 10 branch offices with each 5 to 50 users and a headquarter with about 50 users. Every BO has its own XGS firewall, which is currently connected via IPSEC VPN and will later be connected via MPLS to the HQ. In HQ…

Good day we are using sophos firewall xgs 87 I have a problem. I want to allow the internet to go to all branch offices through the XG firewall at the head office. via ,mols vpn The other branch office has a Sophos firewall, Currently, I have…

Hi Ok so I might be rather dim (and I hope not as I am supposedly a certified SFOS Architect!) but we are deploying a 10 SD-WAN site to site mesh of XGS firewalls with multiple WAN links into each site for a customer using SD-WAN Central Orchestration…

How do I enable reauthentication for site-to-site IPSec connections ? Sophos XGS3100, SFOS 19.5.3 MR-3-Build652

Hello, I have to create several site-to-site IPsec between Fortigate Firewall and our Head Office Sophos Firewall. All connections must go to the same subnet in our Head Office. I've configured the Sophos as "Respond Only", the subnets are configured…

Hallo zusammen Vielleicht hat jemand von euch noch eine Idee wo ich suchen kann oder was falsch ist. Wir haben auf 2 Sophos XGS107 immer wieder Verbindungsunterbrüche ins Internet. Das Problem ist das es nicht komplette Unterbrüche sind. Ich probiere…

Hello everyone, To configure a site-to-site VPN between two XGS 116, is it better to configure encryption as IKEV2 on both firewalls or DefautHeadOffice for the headquarters and DafautBranchOffice for the branch? Thanks André Soares

I have a new Sophos XGS116 I have just installed replacing a Cisco ASA5506. (Site B) I setup the s2s with the same profile and settings (not subnet or public IP) as I use on another XGS116 (Site C) for the same customer. Both these 116s have a site…

Been using 1 same preshared keys for over 10 sites that backhaul back to our HQ till now. However eversince v18 onwards, it's getting more and more unstable. After restarting our HQ Firewall, at least 3-4 sites tunnels wouldn't up. Ticked the create firewall…

Hi, We have an IPSec s2s connection, and there is a remote subnet 10.0.0.0/255.255.255.0. Migration was done with configuration export/import and it seemed almost everything migrated successfully (only some firewall rules involvind ad users where…

2 XGS connected via ISP PTP fiber as primary. Each XGS has a second ISP which will be used for a IPSEC tunnel in case the primary link fails. Currently OSPF is in use. I have a IPSec VPN between 2 XGS using a tunnel. Both XFRM interfaces are 192…

Hello, I have a strange issue on site to site VPN between two Sophos XG firewall. The site to site VPN was built with class C subnets as below. Site A - 192.168.1.0/24 Site B - 192.168.8.0/24 The sophos XG firewall generated VPN rule on top permit…

Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Product and Prerequisites …

Hey All, I've created an IPsec tunnel between my Sophos XG unit and a Meraki. On the Sophos unit, the "Connection" dot is yellow and when I click for more info, it shows that only one of two subnets is accessible. Clearly, the IPsec settings are correct…