Yes, they do, Tom. The RED "calls" the RED Provisioning Service in the cloud to get it's configuration, and uses that to connect to the UTM that "owns" it.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
Having just got my first RED box it's not so good having to have 3400 and 3410 open on a firewall for the RED to start the tunnel.
I'm hoping we can change this to 443 in the future.
Why is this a problem? We are a touring company and so go to lots of places. It's a pain if we have to ask every place to open ports for us. (some will, so won't) Is was assuming the RED was truly a plug and play tunnel. Almost. [:)]
You could of course also work with (SSL) VPN remote access, or you could perhaps use a UTM 110/120 and build an SSL tunnel between it and the main UTM.
Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
