eoIP Sophos XG alternative

Sophos could actually build this with RED Site to Site or IPsec.

https://community.sophos.com/kb/en-us/125101

It is like a Cable between both appliances. 

Hi LuCar Toni thank you by your reply.

When you say "RED", is it the Hardware or Software (embedded into XG appliances), or both? 

Regards,

Carlos

Hi Carlos, 

Sophos Remote Ethernet Device (RED) is a small network appliance, designed to be as simple to deploy as possible. Its main purpose is to provide a secure tunnel from its deployment location to a Sophos XG Firewall.

There is no user interface on the RED appliance. It is designed to be fully configured and managed from a Sophos Firewall. RED devices can be shipped to a remote site, connected to any DHCP connection to the internet, and be fully configured by a remote administrator with no prior knowledge of the site, and no need to walk local personnel through technical setup steps. 

From Sophos Guide: https://community.sophos.com/kb/en-us/126454

Best, 

BadRobot

Hi Badrobot 

Yes I know abouot RED device. When I aked abou software I meant about RED Interface in sophos XG. Because My customers already has XG devices and not RED devices.

Did you understood!?

This config

Cheers,

Carlos

Actually XG is capable of doing the same mechanism like RED.

You will simply follow my KBA and one XG acts as Server and one as a RED "Client".

Basically that only matters in Case of multiple WAN Connections. 

But most likely the tunnel will be up and you will have a "direct" connection between both XGs.

So you have to setup everything like a direct connection - Routing, Firewalling etc. 

Hi LuCar Toni 

Yes, about RED Server and Client using XG, I have tested it with success!

My doubt is this scenario

HO LAN 192.168.0.0/24    ---- Sophos XG  RED Server  ------- Internet   -------- Sophos XG RED Client ------ BO LAN 192.168.0.0/24

I need usage the same LAN segment in HO and BO, and I don' t have ideia about do it.

Regards,

Carlos

That is more complicated.

You need something called 1:1 NAT. 

It would basically hide everything behind a NAT to the other side. 

Or you could Bridge both sites together (LAN to RED on both sites). I would not recommend to do it. 

Couldn't you also do a site to site VPN in this case between 2 XG Firewalls, https://community.sophos.com/kb/en-us/123140

Hi Badrobot 

I already usage IPSEC VPN, but in this case, I can´t usage due the both network segments need to be the same, and I can´t usage NAT Translator :(

regards,

Carlos

What do you mean with needs to be the same and cannot use NAT? 

What do you mean with needs to be the same and cannot use NAT?