Hello, we have a problem which with the routing over VPN. A user is connected to SSL VPN with the XGS. The XGS has a site to site IPsec VPN connection to resources in the cloud. A request from the user's client using SSL VPN for resources in the…

Hello, I work on 2 Sophos XG on 2 different sites. They communicate with each other using a Site-to-Site IPSec VPN. Site A : Sophos-XGS 33100 (SFOS 19.5.3) Site B : Sophos-XG 330 (SFOS 19.5.3) 3 subnets of Sophos A are configured to be able…

We have a banking customer with Sophos deployment and the network looks like below: Firewalls: XGS 87 (12nos), XGS 107 (2nos), XGS on AWS (1nos) Network: XGS 107 is deployed at DC and HO AWS hosts their software and has a Sophos deployed there…

Hello, I have 2 branch offices that are connected to the head office via VPN , now I want to connect these 2 offices to each other using the head office as a forward node, is that possible? if so please explain how PS: The branch offices don't have…

Hello everyone, I'm reaching out on behalf of a customer who is encountering an issue with their XG230, which seems to be creating two 'phantom routes' as part of the SSL VPN configuration profile. We've noticed that due to these phantom routes, the…

Hi, Having a problem trying to get RED traffic passing over a Site-to-Site VPN to branch offices. RED connected to Head Office. Site-to-Site VPN configured and pushed by Central to Head Office and Branch Office. The branch office subnets…

Hi there. I have 3 sites, each connected to our datacenter. Location 2 has a Tunnel interface connection, Location 1 and 3 have a Site-to-site connection. Like this: Location1 ====sitetositetunnel===== Datacenter=====tunnel=====Location2 Location1…

So I have SSL VPN setup and working. I need to know if there is a way to create specific routes for VPN traffic. We have an internal application that resolves to a Public Range, but our internal router has a route statement to send that instead to an…

I have 2 XGS "A" and XGS "B", connected by a Site to Site IPSEC tunnel. Connections work fine. Now i have to have access to a network at "B" by a Remote-VPN connection at "A" Remote-VPN => "A" <=> "B" The vurtuell network of the Remote …

Hi, we have branch which is connected via site to site vpn. They have their own internet access. My question is there anyway i can route the internet on some pc through VPN site to site and not to their firewall? Thanks, Nidz

Hi everyone! New with Networking. Is it possible to connect another router with a different ISP to my existing architecture? Please refer to the diagram below. The purpose of the "to be implemented architecture" is to allocate all the bandwidth…

Hi all, I have a HQ site and a branch site. There's a policy-based ipsec site2site connection established the sites. Branch site has SSLVPN(OpennVPN 10.81.255.0/24) server running and is used as default gateway. Branch site also has an internal…

We have the following scenario: Sophos XG135 (SFOS 18.5.2 MR-2-Build380) Port 1 gateway to fibre internet Port 2 Gateway to VDSL Port 3 Gateway to LTE Port 4 LAN Clients Port 5 LAN Server Port 6 DMZ The XG connects multible IPSEC tunnels via Port…

Hi all, we are moving from a departement to another. Therefore a Site2Site Tunnel with overlapping networks are planned (using that howto: https://support.sophos.com/support/s/article/KB-000035848?language=en_US ) for the duration of the users…

SSL VPN issue Hello!! I have actualy a problem, I configured a À SSL VPN. My all setting is perfectly configurate. But when I test in my PC I can't connecte. If I test in my Samsung Note10 + with OpenVPN the connection is successfully but no internet…

Hi everyone, I recently switched over to XG Firewall from pfSense, thus kindly excuse my insufficient knowledge. For a testing setup I have virtualized XG on ESXi. My plan is to connect using a SSL VPN session to the manage zone, which is the only one…

I was wondering if in one of the next MRs in SFOS 18 it was possible to include one or both of the following changes: Including the VTI interfaces in the pull-down menu options for PING diagnose * When pinging with an internal interface, letting…

Good afternoon, I have a problem to communicate two remote offices to each other through the head office through SSL VPN. From either of the two remote offices, the services available at the head office and from the central office to any of the two…

So this one has me stumped and its probably just a lack of knowledge issue. We have three XG firewalls across three geographical locations. We are using a 10. addressing scheme with each location being 10.1.*, 10.2.*, and 10.3.*. Cisco routers are used…

Call me frustrated! Over the past two days, I've tried dozens of configurations, fixes, and workarounds to to no avail. PROBLEM: A remote Mac user successfully connects to our Remote SSL VPN but can't join the Windows domain or connect to any local…

How can I modify/change/delete the cyberoam gre tunnel by using console? My site is routed by using gre tunnel to headquarter, the ISP change the public ip address of one of site, so how can i change romote-gw in cyberoam console? Need help please

Hi Friends, We use Sophos Xg with version 17.06. We have a problem in this software. When we downloaded Vpn config file for windows. The size of file is shown as 0KB. Because of this, We cant connect vpn. Verify failed error is shown in vpn logs.…

Hi everyone! I'm setting up a lab for a customer PoC and I'm having trouble routing from On-Prem connected by IPSEC Site 2 Site Azure VPN to users dialled in via Azure IKEv2 Point 2 Site and vice versa.. Please see below: The on-prem server can…

Good day all, I have a XG135 at a client site and setup a SSL VPN (Site 2 Site) with our Firewall XG 115. I have successfully setup the SSL VPN and have created the Firewall Rules to see from the client site my Datacentre network. (Backup server…

Buenos días Quería consultar lo siguiente, tengo un equipo con sophos Endpoint Security and control 10.8. Cuando conecto el equipo por medio de un Wifi y después abro la aplicación del cisco System VPN me manda un error 51 como el adjunto, después de…