XG to XG RED VPN With Multiple WAN interfaces

I guess, you cannot perform 4 tunnels, but 2. 

The point is, XG is using a Random Outbound IP, if not specify via CLI.

https://community.sophos.com/kb/en-us/122999

But this command relies on the destination.

So basically you cannot use it 4 times to bind it properly. 

Hi LuCar Toni,

Thanks by your response.

Well, I already suspected this, but I would like to confirm :)

I would be interesting has a option to bind it.

Best regards

Carlos

LuCar,

After several tests and contact with Sophos Support - Ticket  #8799470

I was informed that is not possible control the Client Outbound interface.

>> Hi Carlos as we discussed that in scenario of site to site RED tunnel it would not be possible to control outbound traffic on client side of RED tunnel.

This is really so bad to this scenario. :(

Regards

Carlos

I am not quite sure about this answer. Currently i have no access to any ressources within Sophos but you should discuss this with Support. 

FloSupport Could you please review this case?

I am quite sure, this should be possible. 

Hi Carlos Cesario 

I've located your support case and reviewed the activities.

It was mentioned during your troubleshooting session a static route and a sys-traffic-nat route NAT policy were both created in an attempt to configure the outbound interface for RED tunnel establishment, however without success. Is this correct?

I'll also follow up with my team in the meantime to clarify the expected behaviour.

Hi FloSupport 

Yes, you are right.

After troubleshooting session, static route, sys-traffic-nat route NAT policy it was applyed with no success.

And according the support after double check it is not possible.

Regards

Carlos

Hello FloSupport 

Have you any news about this thread!!!?

Regards

Carlos

Hi Carlos Cesario 

Apologies for this inconvenience, I would advise creating a suggestion for this feature request on our Sophos Ideas page for visibility to our product team.

Regards,

Hi FloSupport 

This is so bad, anyway I willl create a feature request

Best regards

Carlos

Already there is an feature request for this

https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/31790149-red-xg-to-xg-client-side-multiple-wan-link-fail-ov

Carlos

https://community.sophos.com/products/xg-firewall/f/vpn/96722/xg-to-xg-with-multi-wan/359076

Hi onward 

Thanks by this. 

It seems this already have a long time as discussion. As other missing features.

Regards
Carlos

Hi onward 

Thanks by this. 

It seems this already have a long time as discussion. As other missing features.

Regards
Carlos