Site-Site IPSec VPN Connection Sophos XG

Hello George,

you are sitting behind a router, who has the "WAN-Port" IP by chance? So that your Sophos firewall has a transfer-net in between?

Could you provide a simple network diagram?

Hi Philipp,

Yes the firewall is sitting behind a router. The firewall is in brigde mode as shown below.

Instead of Bridge mode, I would suggest to use Gateway mode or Mixed Mode.

https://support.sophos.com/support/s/article/KB-000035805?language=en_US

This article contains a list of unsupported bridge interface gaps.

• Dynamic DNS
• DHCP Client
• IPsec VPN
• PPPoE

For more information about the Sophos Firewall interfaces, go to its Interfaces section.

Thanks Nilesh,

Let me try that.