Over Sophos RED site to site Tunnel how to send internet traffic of client site to server site

Question

Hi Sophos Community, 
 I am in trouble trying to send the Internet traffic of the client or branch site to the server-site or head office. 
 The RED tunnel between two XGs is working correctly between Lan-Server and Lan-Client. However, I need to move the internet traffic of my Lan-Client to the WAN of the Head Office. 
 I created a firewall rule in the main site with the masquerade. But I cannot find the way to route the traffic of my devices over the client site. Always the traceroute stuck over the default gateway in the Lan-Client. 
 I am working with the 18.5 version. 
 I trying to create a SD-WAN using as a gateway the RED IP of the main site without sucess. 
 Now I am really lost. Could you please help me to find a way to solve my problem?

LuCar Toni · Accepted Answer

You can use static route or SD-WAN Routes. But it has to match. SD-WAN routes are easier. You can install V19.0 MR1 and use the internet v4 object and use the RED tunel as a interface. BTW: You have to consider the route precedence. community.sophos.com/.../routing-in-xgv18-with-sd-wan-pbr

__________________________________________________________________________________________________________________

Over Sophos RED site to site Tunnel how to send internet traffic of client site to server site

Top Replies