Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 985 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect Provisioning file Gateway Failover issue

Helix

Hello all,

Is it that the multiple gateway provisioning file is if there are multiple Sophos XG firewalls or if there are multiple ISPs(Internet service providers) on one Sophos XG firewall?

Because I have simulated the multiple gateway script using my multiple ISP's and it skips other ISP public IP and selects the ISP(Interface) configured for Sophos connect, when the ISP information is removed from the script it gives cannot connect to gateway error even though other ISP information's are still there.



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    The failover is between multiple ISP(interface) and is only supported with SSL VPN on Connect Client. 

    Thanks,

  • 0 in reply to FormerMember

    Hello Patel,

    I have configured this using the below script

    [
    {
       "display_name": "XG_SSL-VPN",
       "gateway_order": "in_order",
       "gateway": [ "xg1.some.company.com", "xg2.some.other.com", "xg3.yet.another.com" ],
       "user_portal_port": 433,
       "otp": false,
       "auto_connect_host": "inside.ad.local",
       "can_save_credentials": true,
       "check_remote_availability": true,
       "run_logon_script": true 
    }
]

    with my understanding i believe it should try the gateways in order but in my own case it jumped the first two ISP's and used the 3rd ISP on the list and i noticed that ISP was the interface configured for Sophos Connect.

    when i removed the ISP IP and leave the remaining two ISP i got no response from gateway error.

    Is there further settings to be done and if you have been able to get this to work share your configuration.
  • FormerMember
    0 FormerMember in reply to Helix

    Hi ,

    Could you please share the screenshot from the VPN > Show VPN settings > SSL VPN? 

    Thanks,

Reply Children
No Data