2x Sophos XG RED Tunnel site2site non split mode doesnt work

There is no user interface on the RED appliance. It is designed to be fully configured and managed from a Sophos Firewall. RED devices can be shipped to a remote site, connected to any DHCP connection to the internet, and be fully configured by a remote administrator with no prior knowledge of the site, and no need to walk local personnel through technical setup steps.

MyLabCorp Employee Login

Hi, I think I expressed myself wrong.

The RED Tunnel is established between two XG Firewalls.

Without RED devices only the RED tunnel mode.

There are multiple approaches to do this.

Static Route (0.0.0.0) on the BO Firewall. 

SD-WAN Policy based Route

Setting up the RED as a WAN Interface. 

All those approaches require a RED to WAN Rule on the HQ. 

There are multiple approaches to do this.

Static Route (0.0.0.0) on the BO Firewall. 

SD-WAN Policy based Route

Setting up the RED as a WAN Interface. 

All those approaches require a RED to WAN Rule on the HQ. 

Thank you for the ideas.

1. First, I also set a default route 0.0.0.0 on BO. However, websites could be reached for a moment. (I created a RED2WAN rule for https on HQ) but After few seconds the tunnel was disconected. The tunnel also failed to reconnect.

After the 0.0.0.0 route was deleted, the tunnel was reconnected. The 0.0.0.0 route was only set on the BO side. On the HQ side I have set the "BO LAN > RED Interface" route (as previously left)

2. It worked with the SD-WAN Policy-based Route. Thanks for the hint. Even if I don't quite understand how it works. I left the LAN BO <> LAN HQ routing anyway.

3. You write "Setting up the RED as a WAN interface" is also a possibility. When I set up the RED tunnel, I can only add it to the LAN zone and not as a WAN interface. Could you maybe elaborate on that? Unfortunately, there is little documentation about this at Sophos. Many thanks for the help