This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG FIREWALL A RED 15W

HELLO GOOD AFTERNOON, I HAVE A DOUBT REGARDING HOW I SHOULD CONFIGURE MY 15W NETWORK IN MY XG FIREWALL,

SINCE I HAVE 3 OPTIONS STANDARD UNIFIED DIVIDED AND TRANSPARENT STANDARD DIVIDED.

FOR WHAT I REALLY NEED IS THE FOLLOWING, HAVE A VPN CONNECTION TO THAT BRANCH AND CAN REMOTELY CONNECT TO THE DVR.

I WOULD APPRECIATE YOUR SUPPORT THANK YOU!

This thread was automatically locked due to age.

0 FloSupport over 6 years ago

Hi Marcos Ramirez

Would it be possible to further clarify your setup?

Are you referring to connecting via VPN (SSL?) to your head office's XG firewall and then connecting to the DVR on the RED remote site?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to FloSupport

We have an technical Training KBA:

https://community.sophos.com/kb/en-us/116573

He explains in more detail, what you can do with RED.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcos Ramirez over 6 years ago in reply to FloSupport

HELLO,
I WOULD BE ABLE TO CONNECT ME FROM MY CENTRAL OFFICE TO THE SECONDARY OFFICE
THROUGH THE NETWORK-15W AND SO I CAN VISUALIZE FROM MY CENTRAL OFFICE THE CAMARAS OF SAID OFFICE.

CURRENTLY WE HAVE IT CONNECTED BY A NETGEINE AND A CYBEROAM BY MEANS OF IP SEC
THIS IS HOW FROM THE CENTRAL OFFICE WE CAN DISPLAY THE CAMERAS OF THE SECONDARY OFFICE.
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 6 years ago in reply to Marcos Ramirez

Hi Marcos,

As LuCar mentioned above, please take a look at our RED technical training KB for more info.

All 3 options are valid, however the setup choice is yours as per your network requirements.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcos Ramirez over 6 years ago in reply to FloSupport

Hello again.
Which option would be the best, if I want the network-15w to take the internet from a modem in the secondary office and not from the central firewall.

I have configured it in the standard / unified mode with an ip destination destined for that office, I have activated the wifi network too, since my xg-230 I can see online the network-15w but when I connect any device either by LAN or wifi has internet access.

I have created a firewall rule in the following way:

origin
lan -----> red15w ----> always

destination
wan ----> anyone -----> anyone

in nat and routing I have selected masq
and I have put my ip addresses (primary, reservation) that are those of my central firewall

What is wrong? help
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 6 years ago in reply to Marcos Ramirez
Hi Marcos,

You would want to configure your RED tunnel in Standard/Split Mode assuming that you also want the XG to manage the remote network (DHCP).

Only traffic for selected networks is sent through the tunnel. All other traffic is sent directly out the local internet connection.

Follow the procedure outlined in this section to configure your firewall rules.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcos Ramirez over 6 years ago in reply to FloSupport

IT WAS ACCEPTED TO ESTABLISH A RULE IN FIREWALL ACCORDING TO THE AREA WHERE THE NETWORK IS (LAN) AND EVEN SO I HAVE HAD NO INTERNET CONNECTION, NOR WIFI SINCE I ALSO HAVE ACTIVATED THE WIRELESS. I DO NOT KNOW WHAT CAN BE
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 6 years ago in reply to Marcos Ramirez

Hi Marcos,

Would it be possible to enable the support access tunnel on your appliance and PM me with your access ID so I can investigate further?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcos Ramirez over 6 years ago in reply to FloSupport

Hello good day, of course yes, some specific hours? since I would like to know what was the detail
Cancel
Vote Up 0 Vote Down

Cancel