Sophos Firewall

Discussions Connect a second firewall to primary network for admin purposes

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 5 replies
Subscribers 28 subscribers
Views 773 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connect a second firewall to primary network for admin purposes

tripleview over 5 years ago

All,

Our city has an XG310 as its primary firewall. We don't have the money for a second in HA, but we do have an SG310 running SFOS 12.5.9.

I have configured the SG so I can plug in the LAN and WAN cables from the XG (primary) in the event of a failure and use the SG.

I would like to connect the SG to our network so I can update it remotely instead of driving to the datacenter. Is this possible?

This thread was automatically locked due to age.

Parents

0 emmosophos over 5 years ago

Hello Tripleview,

Thank you for contacting the Sophos Community.

If the SG device has internet access you should be able to connect to it, depending on how you are configuring, however since it is running a really old Firmware, I would recommend you to re-image the device, I am not even sure if you can upgrade from 12 to 17.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to emmosophos

Hi,

I suspect he means v17.5.9 because XG only started at v15.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 5 years ago in reply to emmosophos

Hi,

I suspect he means v17.5.9 because XG only started at v15.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 tripleview over 5 years ago in reply to rfcat_vk

Correct - I should have written 17.5.9.

Can I give an interface on the SG a static IP, connect it to a switch, then access the web interface through my City's network?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to tripleview

You can run the SG with SFOS on Base License. You cannot import your Backup on this appliance in Case of failure.

See: https://community.sophos.com/kb/en-us/124585

You would have to look at this appliance as a separate gateway. So build up the configuration at his own. Maybe Central Management would be a good approach in V18.
Cancel
Vote Up 0 Vote Down

Cancel
0 tripleview over 5 years ago in reply to LuCar Toni

Ok, so on the old SG could I:

-assign another Interface (ex. Port 5) to the WAN zone, then
-specify an IP with the same subnet mask as my primary network, and
-specify my primary XG firewall as the gateway?
Cancel
Vote Up 0 Vote Down

Cancel