This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Anyone has experience on VPN IPsec ( site to site ) beetwen XG 17.x and Azure ?

Now are in a migration from an SG to XG and i need to know if i can maintain ikev1 ( policy based ) ipsec vpn also in XG . Otherwise i need to change azure and XG configuration for a route policy base ( ike v2 ). The ikev2 configuration seem the only supported configuration, but we have many trouble in a such configuration.

Thanks Marco

This thread was automatically locked due to age.

Parents

0 FloSupport over 6 years ago
Hi MarcoCaserio

Microsoft Azure supports both types types of VPN Gateways (Route-based and policy-based) and both are compatible on the XG, so you should have no issue.

Take a look at the following articles and use them for reference during your migration:

Sophos XG Firewall v17: How to establish a Site-to-Site IPsec VPN to Microsoft Azure

Sophos XG Firewall v17: How to configure a site to site IPsec VPN with multiple SAs to a route based Azure VPN gateway

Please let us know how your migration goes!

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 bz351 over 6 years ago in reply to FloSupport

If you are doing more than one network don't follow the KB above for Multiple SAs its wrong Sophos is about to rewrite this KB or release a new one due to this.

There is a problem if you add more than two networks to local it will break.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to bz351

As far as i know, the second KBA should work.

XG supports IKEv2 but only Policy Based VPN.

Maybe another XG in Azure with base License is cheaper in the long run?

You would buy only the appliance license (1C2) and the Compute price for running XG.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 6 years ago in reply to bz351

As far as i know, the second KBA should work.

XG supports IKEv2 but only Policy Based VPN.

Maybe another XG in Azure with base License is cheaper in the long run?

You would buy only the appliance license (1C2) and the Compute price for running XG.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data