This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Will RED work on private net?

One of our branch offices in Mongolia get's internet via a private network.
(That is, the IP assigned to the firewall is on a private IP 10.0.10.1)

The default gateway assigned is still on a private network and the ISP then routes this out to the internet.

Will RED work in this scenario?

Is it possible to get hold of a trial RED device in Australia?

This thread was automatically locked due to age.

0 BrucekConvergent over 13 years ago

I have not tried one of these in a "double-NAT" setup such as that you describe, but I'd be willing to bet it would work fine, so long as the device can eventually create an outbound connection on TCP/UDP 3400.

As for the availability of eval devices in your area, check with your reseller; I know we stock them here (my company is based in the US). There was a short period of time after the RED feature was released during which it was difficult to get any from distribution (several large orders, etc. drained supply, as I understand it), but we've been able to get them easily and quickly for quite some time now. I'm sure they (your reseller) could get you one to test with.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 13 years ago

I usually deal with US/Canadian resellers due to the huge markup Aussie resellers seem to have.

It's usually around 30% cheaper for me to buy from overseas....
Cancel
Vote Up 0 Vote Down

Cancel
0 UrsWeiss over 13 years ago

Also would say that it should work as long you can connect to port 3400 TCP/UDP from this private network to the ASG.
I will get two RED within the next day and i can test it from our internal LAN.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 13 years ago in reply to UrsWeiss

Thanks for the info. Now to get hold of a unit...

Is it available as a virtual machine? (ESXi preferred).
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 13 years ago in reply to Simon Shaw

Not as a VM or Linux image; that's sort of the point, a cheap little box to connect your offices with no fuss.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 13 years ago in reply to BrucekConvergent

I know but it would be a cheap easy way to test and eval...
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

Simon, there's a post here somewhere this year describing how to configure two Astaros so that one sees the other as a RED. It's a command-line technique: https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/20969

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 13 years ago

Looks like the workarounds incomplete, emailed some of the thread members and waiting on response.
Cancel
Vote Up 0 Vote Down

Cancel
0 ReD-MaN over 13 years ago in reply to Simon Shaw

I never got any replies on how to further proceed with it. So I ended up using Zeroshell Linux to make my bridge.

I love the idea of what Tom dangled out there, but it didn't work completely [:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 13 years ago

Hrm, I just wanted to simulate a RED device for eval purposes. Guess I'll try the commands given and see what happens.

Thanks RemoteEthernetDevice-MaN
Cancel
Vote Up 0 Vote Down

Cancel