How to create a trunk between my Sophos Firewall XG X3300 and my Watchguard M410 ?

Question

Hello all, 
 
 Currently, we need to migrate our existing Firewall Watch Guard Router whose license will expire soon by the Sophos Firewall. So we ask for your help to set up a trunk between these two routers, indeed the idea is that the Sophos will play the role of Firewall as shown in the following graph

We would like to know if you have any configurations or what support we can have for the realization of this change, indeed the functionalities of Watchguard will remain the same (VLAN ? Wifi, Routing, ....) 
 
 BR 
 Tovo

Raphael Alganes · Answer

Hi Tovo RAKOTOZANANY , 
 
 Good day and thanks for reaching out to Sophos Community, hope you are well. 
 
 Would the Watchguard M410 be retain in the setup? If yes, does the interface eth1 of WG->XGS Port2 be a routed/L3 interface? 
 If yes, you would likely need static routes from WG (default static route) and XGS to WG (static routes) to introduce VLAN networks. Kindly note as well that if WG would have a routed interface going to XGS that traffic would likely be NATed from WG and you might need to plan you FW policy in XGS accordingly. 
 Also, since this is an implementation activity. I may recommend to consult your local Sophos partner or consider availing Professional Services https://www.sophos.com/en-us/support/professional-services 
 Have a nice day ahead and Thank You for choosing Sophos 
 Cheers,

How to create a trunk between my Sophos Firewall XG X3300 and my Watchguard M410 ?

Top Replies