Azure Site-to-Site VPN - Between Sophos in Azure and On-prem Firewall

Hi Vicky Raj 

Here's are the in-depth articles related to this topic

• Sophos XG Firewall v17: How to establish a Site-to-Site IPsec VPN to Microsoft Azure
• Sophos XG Firewall v17: How to configure a site to site IPsec VPN with multiple SAs to a route based Azure VPN gateway

Regards,

Hi Team,

Thanks for the response and I have went through the documents.

But the document explains only about to create S2S VPN from Azure native VPN  with Sophos XG in On premises. But what I have requested is to create a S2S between Sophos which is implemented in Azure and On-premises Firewall.

Regards,

Vikneswaran R

Hi Vicky Raj 

In that case, you would simply follow this article:

• Sophos XG Firewall: How to set a Site-to-Site IPsec VPN connection using a preshared key

Ensure that you have the proper Network ACL's configured on Azure to allow this connection.

Regards.

Thanks for the response. but again the document refers the configuring S2S between two dedicated firewall which has a public IP configured in WAN interface. but in Azure, there is no public IP assigned in the WAN interface. Please look at the attached diagram for reference.

XG in Azure will use the same mechanism like a XG behind a NAT Gateway.

First of all, you have to decide, which Site should initial the connection.

You should consider to use a public DNS Record. Azure will give you one, as far as i know. 

So if you want to connect from Azure to On Prem XG, simply build up the tunnel from Azure (initial connection) to on prem. 

Or vise versa. It is up to you. 

https://community.sophos.com/kb/en-us/123140