Hello, we have a VPN-tunnel from our XG330 (SFOS 20.0.2 MR-2) to Azure and want to host a web application in azure. The VPN Tunnel was done via the configuration file and is route based, with the xfrm interfaces being in the169.254.0.0/30 subnet…

Getting the following error requesting Lets Encypt certificate "type":"urn:ietf:params:acme:error:connection" "detail":"xx.xx.xx.xx: Fetching xxxxxxxxxxxx/.../mhmbdFphj1tfMCrRkrqqrp2CrgNY54ipSQeI66mcGFQ: Timeout during connect (likely…

Dear all, The AD Azure has been added to Sophos firewall but Test connection failed as server down or unreachebale. Do you have the same issue, please support me to resolve on this. Thanks & best regards, Viet ton

Dear Sophos Support, I hope this message finds you well. We are experiencing an issue with our Site-to-Site VPN setup. While the VPN tunnel appears to be up and stable, we are unable to access the servers that are sitting behind the Azure gateway…

Dear all, I would like to get to support from all of you show me guide how to add the AD Azure to the Sophos Firewall Best regards, Viet Ton

Hi, I have a Sophos firewall appliance (SFV2C4) hosted virtually in Azure. I have been trying to get the backups of the VM working but it continues to fail. I found this thread from 3 years ago that says you can't back it up and I am just checking…

Hi All, Sorry if this has been asked previously, I have combed through the forums and could not find a solution or direct discussion to this specific issue I am facing. We have signed up for the Sophos XG Firewall via the Azure marketplace image. I am…

Hi, Running SFOS 20.0.1-MR1, have setup Azure/Entra ID for SSO I can: - Use the test button under the Entra account, it shows grren. - I can connect and import groups into the firewall from Entra - I can sign into the firewall I cannot…

Hi all, I was hoping I can seek some guidance on this forum. Currently, we are using our Sophos XG Firewall to connect to our network on Azure using an IPSec VPN Tunnel. We do have two ISP running in our building one being main and other being backup…

As per diagram, I could access TCP port 1521 from clientVM with " telnet 192.168.100.5 1521" . But , I used "telnet 192.168.100.240 1521" , it cannot access. Why? I can ping and access this in on premise vsphere. but not in azure? Please any suggest…

So I've seen some articles around on how to setup a Sophos to Azure site to site using tunnel interface, however all my research and talking with Sophos indicates this can only work if the Sophos firewall has a static IP on the WAN. In my scenerio, the…

Hello all, Network (kinda) and XGS newb is back with another question. I'm pretty sure the answer is going to be a "yes/no and you're just missing this little step to get it done". I've included a summarizing picture. Presently working: We have an…

Hello! We are an MSP with about 20 clients that have servers hosted in Azure. These 20 clients have various hardware models of Sophos XG and XGS firewalls with various steps of firmware from 19.5.3 to 20.0.22. Those firewalls have an IPSec site to site…

Hi there, I purchased a sophos firewall instance from azure firewall. https://azuremarketplace.microsoft.com/en-us/marketplace/apps/sophos.sophos-xg-firewall-solution?tab=overview Where can I find the serial number?

Hi, We have a vnet in azure with 2 address spaces 10.50.x.x and 10.90.x.x. We have deployed a sophos firewall there and added 2 subnets in 10.50.x.x as lan and wan networks. We also need to have 10.90.x.x network connected to the firewall. When we try…

i have two vnets in resource group. vnet1 network address is 192.168.0.0/16. Wan subnet is 192.168.100.0/24 Lan subnet is 192.168.200.0/24 Sopho Xg firewall is deploy in this subnet. Wan portB interface ip address is 192.168.100.4/24 and Lan portA…

Hi, what is the status of this development, when is it coming? has sophos not yet understood how important this is for customers? the workaround that you send to people here in the forum does not always work properly either. we need a solutions, now…

NPS is working perfect with Sophos MFA via onpremise VM try to migrate it to Azure vm but keep getting error: A RADIUS message was received from the invalid RADIUS client IP address 169.254.0.1 on the new NPS server. Any Ideas?

could you please provide a date on when the integration with Azure AD will be fully supported, not just for the admin? this is crucial Info for us to go ahead and replace our firewalls world wide for Sophos Firewall. recently we bought couple Sophos firewalls…

We have an XGS 2100 with an IKE2 IPSEC Site-to-Site connection to Azure. When initiating the connection, the "Flat LAN" subnet mounts but the various VLAN's bound to the "flat LAN" don't come up. The VLAN's are used for SIP phones and WiFi access…

Hi I am trying to resize the data disk following this KB https://support.sophos.com/support/s/article/KB-000036775?language=en_US after restarting the VM and selecting from menu 5, 3 through putty, this is what I am seeing. it's not resizing it…

I have two sites both protected by a SOPHOS device. From my UK (UTM 9) site I have a point to site Azure VPN working to a file share in my Azure virtual Network. Working great! It is secured with a self-signed certificate chain. I have colleagues working…

If I run the XG Firewall in azure Microsoft Azure Marketplace as PAYG licensing, am I billed for the hourly cost of of the PAYG license if the Sophos VM is in a stopped state? I understand in a stopped state i am billed for the azure vm cost, in a stopped…

Hello ! I have problems setting up dual NIC config for my XG instances - I just want to create an LAN NIC (10.50.0.0/19) and a WAN NIC (10.50.32.0/19) for my Sophos XG instance in Azure. If I deploy this directly in Azure via the GUI, everything works…

Hello! Can anyone confirm that I understand this correctly: There is no way to get Active-Passive or Active-Active HA working in Azure with 2 XG instances as Azure does not support MAC spoofing. Manually configure HA in Azure - Sophos Firewall -> since…