Sophos xgs on prem Firewall Ipsec tunnel to Azure sophos xg firewall

Hi Justin,

Thank you for reaching out to Sophos Community.

Kindly try to refer to the following Recommended Read if this would assist you.

 Sophos Firewall: Configuring an IPsec VPN Gateway Connection to Azure 

Thanks Erick

But this looks to be a vpn tunnel between on prem sophos firewall and just azure, iam trying to get a the tunnel running between on prem sophos xgs and virtual sophos XG firewall.

Hello Justin,

Yes, it’s possible! 

What Firmware version are you running in your Prem Firewall?

Make sure the Azure Firewall is the initiator of the tunnel and the Prem, is the responder. and of course that the IPsec policy matches in both ends.

Also in the Local ID type and Remote ID type, enter a made-up Local ID and Remote ID using email format:

E.g in Azure Firewall

Local ID = 123@abc.com

Remote ID = 789@abc.om

On Prem Firewall

Local ID = 789@abc.com

Remote ID = 123@abc.com

Regards,

Hi Emmanuel

Thanks for the reply,  on prem firewall is running "SFOS 19.0.1 MR-1-Build365" and Azure is running "SFOS 19.5.0 GA-Build197".

I can confirm IPsec policy match on both ends and i have setup local and remote ID as describe, Also the azure firewall is the initiator.

Suppose another question is, do i need "Azure Local Network Gateway" setup? i assumed we would only need this if we were setting up the tunnel direct to azure and not to another sophos firewall? And finally do we need to open up ipsec ports in Azure? 

Thanks