Dear Sophos Support, I hope this message finds you well. We are experiencing an issue with our Site-to-Site VPN setup. While the VPN tunnel appears to be up and stable, we are unable to access the servers that are sitting behind the Azure gateway…

Hi all, I was hoping I can seek some guidance on this forum. Currently, we are using our Sophos XG Firewall to connect to our network on Azure using an IPSec VPN Tunnel. We do have two ISP running in our building one being main and other being backup…

So I've seen some articles around on how to setup a Sophos to Azure site to site using tunnel interface, however all my research and talking with Sophos indicates this can only work if the Sophos firewall has a static IP on the WAN. In my scenerio, the…

Hello all, Network (kinda) and XGS newb is back with another question. I'm pretty sure the answer is going to be a "yes/no and you're just missing this little step to get it done". I've included a summarizing picture. Presently working: We have an…

Hello! We are an MSP with about 20 clients that have servers hosted in Azure. These 20 clients have various hardware models of Sophos XG and XGS firewalls with various steps of firmware from 19.5.3 to 20.0.22. Those firewalls have an IPSec site to site…

Hi, what is the status of this development, when is it coming? has sophos not yet understood how important this is for customers? the workaround that you send to people here in the forum does not always work properly either. we need a solutions, now…

We have an XGS 2100 with an IKE2 IPSEC Site-to-Site connection to Azure. When initiating the connection, the "Flat LAN" subnet mounts but the various VLAN's bound to the "flat LAN" don't come up. The VLAN's are used for SIP phones and WiFi access…

Hi guys and girls, I'd like to configure 2 IPsec VPN tunnels to Azure over 2 WAN links so that if a WAN link fails, it automatically fails over to the second IPsec tunnel. On the Azure side it would be configured to use BGP so that the routes are advertised…

Dear Experts, would like to seek your advise why the firewall XG135 failed to connect to domain controller (for SSL VPN Active Directory authentication) that was promoted in Azure. The below is the setup of my network: Network - Hybrid (Azure site…

How do I configure on-prem Sophos XG 17.X an IPSec tunnel to Azure running on BGP

Hi all As per the subject we are busy testing to see if we can establish a site to site vpn tunnel between our on prem Sophos firewall and a newly created virtual Sophos xg firewall in Azure but we cant seem to get the tunnel to come up. So firstly…

Hi everybody, I'm new to this community and I hope that someone can help me. Scenario: HeadOffice : IP Range 192.168.1.0/24, XGS2100 Branch: IP Range 192.168.2.0/24, AVM Fritz.Box, yes I know it's not the best choice :-) Both sites are connected…

we have setup Sit to Site VPN to Azure. we don't have problem to access Azure from On-Premises. Also we have just setup RED on UTM and add to Lan zone, but we cannot access Azure resource. RED tunnels keep disconnect when we ping Azure resource. …

Hello, Can I do anything to improve RED tunnel throughput between local XGS 2100 on 1000/500 WAN link and virtual XG firewall running in Azure? Enable/disable compression does not change anything as far I can see. PS C:\Users\administrator\Downloads…

Hey all! Got a baffling issue that I can't seem to resolve. I've raised a call with Sophos but they also seem stumped. Setup a site to site VPN to Azure as documented here: Sophos XG Firewall v18 to Azure VPN Gateway IPSEC Connection - Recommended…

Hello, After successfully created the Site-to-Site VPN tunnel between On-Prem network and Azure. I'm unable to reach to Azure VM instance and vice versa. Please find the trace log: Please help and thanks!

Hello Team, We need to create Site To Site VPN connection with Azure, so please required your help for this. Thanks, Anup Bobade. 9960922443

I cannot figure out why my virtual Sophos XG in Azure is NAT'ing traffic across my IPSec VPN tunnel. There is no NAT rule in place for this. In fact, there's only one NAT rule on the whole XG. But all traffic from my local network, going over the tunnel…

Hello We ourselves have an XGS2100 in the office and an XG in Azure. Tunnel is up (IPSEC) and we can ping and connect with RDP to a server (Windows 2022) in Azure. But when we access files on a file share on a server in Azure, we get a speed of about…

Hi, I have created a site-to-site IPSec VPN between my XG and Azure. The tunnel is up, confirmed both sides and I can connect from Azure to local, but not the other way around. I followed this article to the letter: https://community.sophos.com…

Recently we updated our XG230 (HA) to SFOS 18.5.1 MR-1-Build326 and since that time almost every hour we receive and alert in regards to IPsec connection coming from Azure. Any insight would be appreciated, please disregard the crayon drawing as…

Hello All, This is my firt time posting here, so thank you for your time reading my post! The reason why I'm asking for help is because I have an anoying issue in my Lab/Study environment that I can't find a way to fix by myself. Scenario: On-premises…

Gretings i had a firewall on azure and a local firewall, i've stabilished the IPSEC VPN on from one to another, but it doesn't comunicate properly, i had the 10.1.2.0/24 on azure and a 192.168.10.0/24 and 192.168.0.0/24 on my local network, from azure…

Hi Guyzz , We are in middle of establish the cyberaom IPSEC tunnel with Azure VPN (S2S). But as i checked with our vendor it's saying Cyberaom 100ing only support IKEv1. So can i configure it with Azure VPN through the IKEv1? or do i need to upgrade…