Sophos XG Use 0.0.0.0/0 for IPsec tunnel traffic

Question

Is it possible to use 0.0.0.0/0 for the local and remote subnets on the IPSec tunnel configuration? 
 On IP Host, it does not allow me to create 0.0.0.0/0.

MayurMakvana · Accepted Answer

Hello, 
 I believe, you should configure the route based VPN. Adding the local and remote as ANY is not permissible! Using route based VPN, you can control your traffic using static routes! 
 https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/SiteToSiteVPN/VPNRoutebased/index.html

emmosophos · Answer

Hello there, 
 Most likely you haven't changed the type of tunnel, you need to select Tunnel Interface mode. 
 
 Regards,

MayurMakvana · Answer

Hello, 
 Greetings, thank you for contacting Sophos Community! 
 You may refer to the below KBA for the detailed steps: 
 support.sophos.com/.../KB-000035798

emmosophos · Answer

Hello there, 
 Then you would need to configure your IPsec as a Tunnel Interface, this will create a 0.0.0.0/0 in the tunnels, and then you can control the traffic via Static Routes. 
 Regards,

Sophos XG Use 0.0.0.0/0 for IPsec tunnel traffic

Top Replies