Automatic IPSec failover and failback between two XGs with two WAN ports each

Hi Peter,

It does if configured correctly.

Hi MasterRoshi

OK. Thank you. I had just tested it between 2 XGs. It works.

According to

https://community.sophos.com/products/xg-firewall/f/vpn/109606/ipsec-vpn-failover-between-2-xg-with-both-2-wan-connections

To build Failover groups only on the Branch Office side - seems to be the best solution

Can you confirm this?

Peter

OK

Failover and Failback works. Now I test "route branch office internet traffic through the head office ISP gateway" via VPN IPSec connection

according to: https://community.sophos.com/kb/en-us/123261

In my XGs based police routing and internet traffic works only on primary site-to-site VPN IPSec connection. I had defined failover group on BO XG and 4 VPN IPSec connections between 2 XGs . Failover i Failback, after automatic switch to second or third VPN IPSec connection - works with communication between LANs but does not works internet traffic. Internet traffic works only on primary site-to-site connection...

Can you help me?

Thanks Peter.

OK

Failover and Failback works. Now I test "route branch office internet traffic through the head office ISP gateway" via VPN IPSec connection

according to: https://community.sophos.com/kb/en-us/123261

In my XGs based police routing and internet traffic works only on primary site-to-site VPN IPSec connection. I had defined failover group on BO XG and 4 VPN IPSec connections between 2 XGs . Failover i Failback, after automatic switch to second or third VPN IPSec connection - works with communication between LANs but does not works internet traffic. Internet traffic works only on primary site-to-site connection...

Can you help me?

Thanks Peter.