New SNAT from exiting one SG

You can do the SNAT in the IPsec Config.

Just select NAT in IPsec and do a SNAT.

But keep in mind, you have to change the SA.

Basically you do: 

SA: SNAT IP - Remote IP

NAT to: Subnet IP 

community.sophos.com/.../123356

HI,

Just take a look to the attached image.

Hi,

So? 

Basically you need to select a IP in the local subnet, tick the NAT option an put ANY there. 

And use the IP on AWS as remote subnet aswell. 

Hi ManBearPig,

Could you give me more detailed guidance?

Thanks a lot.

Take a look at XG:

Local Network = SNAT_IP

Remote Network = AWS IP Addresses (Something like 192.168.0.0/24)

Tick NAT

Choose in Dropdown= NAT to ANY or your local Network.

Then go to AWS.

Local Network = AWS IP Addresses

Remote Network = SNAT_IP

Take a look at XG:

Local Network = SNAT_IP

Remote Network = AWS IP Addresses (Something like 192.168.0.0/24)

Tick NAT

Choose in Dropdown= NAT to ANY or your local Network.

Then go to AWS.

Local Network = AWS IP Addresses

Remote Network = SNAT_IP