Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 3032 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RED and Routing

offn
Hallo!

I have to built up a site-2-site-vpn between 2 companies. On my site there is an asg. The other site is not able to provide IPSEC or SSL site-2-site-vpn. So what i plan to do is, to send a red box to them. The target network will not be directly attached to the red but behind a router. So I would add a static route in my asg to the router at the red-site and viceversa. Will this work (of course with paket filtering)?


This thread was automatically locked due to age.
Parents
  • 0
    No, that won't work. They should put the RED inside their network connected directly in front of the network you want to serve and open port 3400. The RED will get it's configuration from the cloud and call you. 

    Cheers - Bob

    Sorry for any short responses!  Posted from my iPhone.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    No, that won't work. They should put the RED inside their network connected directly in front of the network you want to serve and open port 3400. The RED will get it's configuration from the cloud and call you. 

    Cheers - Bob

    Sorry for any short responses!  Posted from my iPhone.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    I think I have to provide more details. Downloading the RED-config is not the problem. The Problem is that the other site does not want (or is not able) to configure IPSEC-site-2-site-vpn. The other site should route the traffic to my internal servers through a RED-box I will send to them and  that is configured to connect to my ASG. All the other internet traffic they should process via their own firewall like they allready do now. Connection-example: site2-LAN1/2/3 > router > RED > site2-firewall > Internet > site1-asg > server-LAN
Unfiltered HTML