Multiple Sophos XG on different sites served by the same domain controller

Question

Dear Community 
 I have the following scenario: 
 1) the head office XG is (SFOS 16.05.5 MR-5 ) 
 2) the branch is XG (SFOS 16.05.2 MR-2 ) 
 3) head office and branch are connected to each other through site to site VPN 
 4) the domain controller is located on the head office and is serving users in both head office and the branch 
 5) STAS is running on the domain controller and is working properly with the head office 
 I need now to use the STAS to serve the XG in the branch, but without sending all log to the branch. I would like to send the log relevant to users in the branch only 
 any suggestions please

Emile Belcourt · Accepted Answer

Hi Suleiman, 
 You would need to set up the collector configuration on STAS to do a subnet based filter for the appliance serving shown below: 
 
 You would configure the subnet based filter with the range of your branch and the IP of the remote branch XG as the target. 
 Have you also configured the Branch to accept STAS via IPSEC VPN as per https://community.sophos.com/kb/en-us/123016 ? 
 Emile