Setup XG to AWS VPN with IPSec and BGP?

Hi all,

I am setting up a site to site VPN connection to AWS using (IPSEC tunnel).

For on premise I am using Sophos XG210.

In AWS, When setting up the download configuration, which vendor, platform, and software should I choose that is closest to XG210 ?

Thank you for the help.

Hi all,

I am setting up a site to site VPN connection to AWS using (IPSEC tunnel).

For on premise I am using Sophos XG210.

In AWS, When setting up the download configuration, which vendor, platform, and software should I choose that is closest to XG210 ?

Thank you for the help.

You have to pick Generic.  There is no option for Sophos at all anymore including UTM or XG.  We finally got ours working by watching this youtube video:

https://www.youtube.com/watch?v=iwj8V8CeeUo

Thanks to David Okeyode for posting it!

Hi joey,

Thank you for posting the link.

In the video, he did not mention where he got the 195.166.150.193.

I would assume that this is public ip address of the Sophos firewall ? is this correct ?

Also for your setup, did you choose static or dynamic ? From the user guide provided from AWS, they recommended BGP.

Is there any difference in terms of Network performance and connection stability between static and BGP ?

Thank you for your help.

Yes that is the static ip of the customers firewall.  Static is the only one that seems to work.  I haven't seen anyone get BGP to work yet.

Our test system is on a crappy 50x5 ATT connection and we are getting great performance using static.