Hello ! I have problems setting up dual NIC config for my XG instances - I just want to create an LAN NIC (10.50.0.0/19) and a WAN NIC (10.50.32.0/19) for my Sophos XG instance in Azure. If I deploy this directly in Azure via the GUI, everything works…

Hello! Can anyone confirm that I understand this correctly: There is no way to get Active-Passive or Active-Active HA working in Azure with 2 XG instances as Azure does not support MAC spoofing. Manually configure HA in Azure - Sophos Firewall -> since…

When is Sophos implementing Azure SAML support for the SSL VPN? It's already available in the user portal how long until we can configure this for the VPN, we are contemplating dumping Sophos and moving to something else to get this feature.

Is it possible to configure two HA firewalls in multiple regions in Microsoft Azure?

Hello all, I have a few questions for the sophos firewall solution in azure. I followed the guide setting up the firewall with a WAN and LAN Interface. WAN is 10.0.1.0/24 with 10.0.1.4 as NIC private IP and a public IP assigned by Azure (example…

Hi, We are currently working on a virtual Sophos XG Firewall Instance, deployed via the Azure Marketplace. I've found this Community Guide on restoring the Firewall itself: Sophos Firewall: Recovery steps of the Sophos Firewall VM in Azure Though one…

Hi guys and girls, I'd like to configure 2 IPsec VPN tunnels to Azure over 2 WAN links so that if a WAN link fails, it automatically fails over to the second IPsec tunnel. On the Azure side it would be configured to use BGP so that the routes are advertised…

Hi We have a SFV2C4 (SFOS 19.0.1 MR-1-Build365) and loads of websites are hosted through Azure VMs to FW. some of APIs requests are times out around 10 seconds, and we observed constant timeouts. Is there anything to do with firewall, anything we…

Dear Experts, would like to seek your advise why the firewall XG135 failed to connect to domain controller (for SSL VPN Active Directory authentication) that was promoted in Azure. The below is the setup of my network: Network - Hybrid (Azure site…

How do I configure on-prem Sophos XG 17.X an IPSec tunnel to Azure running on BGP

Hi guys.. I'm with problems to propagate networks through BGP with Azure ExpressRoute The connection is established, but I keep receiving these BFD logs from Azure: There is any command to solve this? The firewall is on version SFOS…

Hi all As per the subject we are busy testing to see if we can establish a site to site vpn tunnel between our on prem Sophos firewall and a newly created virtual Sophos xg firewall in Azure but we cant seem to get the tunnel to come up. So firstly…

Hi everybody, I'm new to this community and I hope that someone can help me. Scenario: HeadOffice : IP Range 192.168.1.0/24, XGS2100 Branch: IP Range 192.168.2.0/24, AVM Fritz.Box, yes I know it's not the best choice :-) Both sites are connected…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Radius Validation Control…

we have setup Sit to Site VPN to Azure. we don't have problem to access Azure from On-Premises. Also we have just setup RED on UTM and add to Lan zone, but we cannot access Azure resource. RED tunnels keep disconnect when we ping Azure resource. …

If we have deployed the Sophos firewall in Azure North Europe, where our primary datacenter is located, and for Disaster Recovery we have a site in India, then: How can we configure Sophos VPN to use the same profile?

Hi, I've got an XG in Azure, currently setup to access resources in our own Azure subscriptions through a combination of internal IP's and some vnet to vnet peerings. Works fine, no drama. What's been foisted upon me now is a need to have access through…

Hello, Can I do anything to improve RED tunnel throughput between local XGS 2100 on 1000/500 WAN link and virtual XG firewall running in Azure? Enable/disable compression does not change anything as far I can see. PS C:\Users\administrator\Downloads…

I've got a strange one. I've deployed Azure "out of the box" following this doc: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122504/xg-firewall-on-azure-how-to-deploy From the VM, I can ping the Sophos device, but I can…

Hello We have new Sophos VA VM in our Azure (19.0.1 MR-1-Build365 + latest fixes, raised from Azure market). Office LAN: 10.50.0.0/24, static IP on SonicWall WAN Azure VPC: 10.0.172.0/24 (Sophos VA WAN) + static public IP and 10.0.0.0/24 (Sophos VA…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. ______________________________________________________________________________________________________________________________________…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents What is Azure Stack Hub? Network infrastructure…

Hey all! Got a baffling issue that I can't seem to resolve. I've raised a call with Sophos but they also seem stumped. Setup a site to site VPN to Azure as documented here: Sophos XG Firewall v18 to Azure VPN Gateway IPSEC Connection - Recommended…

Hi all, This article describes how to increase data disk capacity for Sophos XG on Azure via the Azure Portal and Powershell: Sophos XG Firewall: How to increase disk capacity for Sophos Firewall on Azure Regards,

Hello, After successfully created the Site-to-Site VPN tunnel between On-Prem network and Azure. I'm unable to reach to Azure VM instance and vice versa. Please find the trace log: Please help and thanks!