How to allow specific ip addresses on udp ports 500 and 4500

Hi Andrew Tweddle,

Are you trying to established IPSec VPN or L2TP VPN from Sophos XG firewall ? 

Thanks and Regards

Hi I am not too sure. I have just been asked to allow certain ip addresses on UDP ports 500 and 4500.

Hi  Andrew Tweddle, 

If service is "any" on the firewall rules from LAN-WAN  all the services are allowed by default. If you want traffic to NAT from WAN-LAN you might have to do port forwarding same IPs.

Please share errors or error messages while using UDP ports 500 and 4500 with snapshots or logs to assist you further.